zedanlab/laravel-username-generator

Dangerous workflowscaution

One workflow uses pull_request_target for Dependabot auto-merge, while no untrusted checkouts or script injection were detected; the restricted findings still warrant review because this workflow class can expose repository privileges.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual user rather than an organization; this is consistent ownership evidence but offers limited backing capacity.

Release historycaution

This is the only release, published more than four years ago, with no releases in the last 12 months; that materially raises abandonment and compatibility risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the measured three-month period, a strong sign that fixes and compatibility updates may not be forthcoming.

Repo issue activitycaution

There are no new or closed issues in the last month and three open pull requests, suggesting limited current project activity, though the small issue count is not severe on its own.