vitamin2/laravel-sync

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script is present, creating some execution surface during installation, though this signal alone does not indicate unsafe behavior.

Release historycaution

Seven releases in the first 30 days, including seven in the last 12 months, show strong early release activity, although the short history limits evidence of long-term stability.

Repo bus factorcaution

All 189 commits in the last three months came from one contributor, creating a meaningful continuity and abandonment risk despite the project's organization backing.

Workflow auditcaution

Both workflows were analyzed successfully, all seven action references are pinned, and no audit findings or untrusted checkout or script-injection paths were found. One workflow grants top-level write permissions, which is a mild hygiene concern, but no untrusted trigger reaches it.