ziming/laravel-crisp

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, this indicates limited publishing redundancy, though it does not by itself show abandonment.

Repo bus factorcaution

All one recent commit came from a single contributor, giving the project a complete short-term bus-factor concentration with no provided organizational backing to compensate.

Repo commit activitycaution

The repository recorded only one commit in the last three months from one active maintainer. That is thin recent maintenance for a library consumers may rely on.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a library that handles external API credentials and data.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned and three workflows grant top-level write permissions. A high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; no untrusted checkout or script injection was detected.