webrek/laravel-mongo-permission

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no demonstrated organizational handoff capacity.

Release historycaution

The project is only 123 days old but has made 10 releases, including all 10 in the last 12 months. This shows active publishing, though the short history limits maturity evidence.

Repo bus factorcaution

One contributor made all three commits in the last three months, concentrating maintenance responsibility entirely in one person.

Repo commit activitycaution

There were three commits in the last three months, showing ongoing activity, but the volume is modest for a project still establishing itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.