angel-source-labs/laravel-spatial

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release partly compensates for this, but the current lack of development activity raises maintenance concern.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence the package is unsafe.

Security policycaution

The repository has no SECURITY.md or other security policy, reducing clarity about vulnerability reporting and response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, which weakens build reproducibility, while the missing top-level permissions block is acceptable on its own.