yannelli/pocket-laravel

Maintainerscaution

Only one registry account has publish access, which is a modest publishing-capacity concern; the linked repository's recent activity provides some compensation.

Project backingcaution

The repository is owned by the individual publisher rather than an organization, so the small maintainer and contributor base is not offset by visible organizational backing.

Repo bus factorcaution

Two contributors are active, although the leading contributor made two-thirds of recent commits, leaving some concentration risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less explicit for consumers.

Workflow auditcaution

Both workflows were fully analyzed with no high- or medium-confidence findings and no untrusted checkout or script-injection paths. However, all five action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow hygiene risk.