vlados/laravel-unique-urls

Project backingcaution

The repository is owned by the same individual namespace as the package, confirming source alignment but offering no organizational backing to offset the concentrated maintainer base.

Repo bus factorcaution

One contributor made 100% of the last three months' commits. The matching individual repository owner provides no organization-level handoff evidence, leaving a real continuity risk.

Repo commit activitycaution

Six commits were made in the last three months, but all activity came from one maintainer, so maintenance is active but concentrated.

Security policycaution

No repository security policy was found, reducing transparency about how users should report vulnerabilities in a package that handles application URLs and database-backed behavior.

Workflow auditcaution

All eight workflows were analyzed, but all 17 action references are unpinned; the audit also found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow had no untrusted checkout or script-injection sink, so these remain workflow hygiene concerns rather than standalone severe risk.