arnelirobles/laravel-rnx

Release historycaution

The package is only 62 days old with two releases, so maintenance history and long-term stability are still limited despite a recent release.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the link does not clearly establish that the repository belongs to this release.

Repo toolingcaution

The project uses Composer but reports no security-scanning tools, leaving a modest security-process gap for a package with interactive components.

Workflow auditcaution

All six action references are unpinned and three workflows grant top-level write permissions. The audit also found a high-severity but low-confidence cache-poisoning pattern and a high-confidence ad hoc package install, creating workflow hygiene concerns without an untrusted trigger or script-injection sink.