wnx/laravel-stats

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance capacity concentrated in a single active contributor.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is light activity, though the recent release history shows the project has not stopped shipping.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkouts or script injection, but the auditor found a high-confidence unpinned container image and all 11 action references are unpinned. This is a build-reproducibility and supply-chain hygiene concern, not evidence of an unsafe trigger.