vmorozov/laravel-log-traces

Workflow auditdanger

All four workflows were analyzed, but all nine action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding may allow actor-context spoofing in the Dependabot auto-merge workflow.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no demonstrated organizational backing to offset the thin recent activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful warning about current maintenance capacity despite the earlier release activity.

Repo issue activitycaution

There are no new or closed issues and no merged pull requests in the last month, with two pull requests still open; this suggests limited visible collaboration.

Repo popularitycaution

The repository has no stars, forks, or watchers. This is weak supporting evidence and does not by itself establish abandonment.