whilesmart/eloquent-owner-access

Release historycaution

This is a new package with one release 100 days after publication, so there is not yet enough release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, limiting evidence of ongoing maintenance after the initial release.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security scanning tools were detected, leaving a preventable quality and security-process gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling security issues, although the package is small and other source documentation is present.

Workflow auditcaution

All six analyzed action references are unpinned, two workflows grant top-level write permissions, and a high-confidence audit found adhoc package installation; these are meaningful workflow hygiene weaknesses, though no high- or medium-severity findings were reported.