yocto/illuminate-database-softdeletes

Release historycaution

The package is only 42 days old and has two releases, both published on the same day. This is too little history to establish mature release practices, although it does show recent publication activity.

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance concentrated in a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository has two commits in the last 3 months, which is consistent with a very new package but provides limited evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is reported. This is a modest transparency and maintenance gap rather than a severe risk.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no reported high- or medium-severity findings. However, all three action references are unpinned, reducing build reproducibility and resilience to action changes.