avto-dev/data-migrations-laravel

Repo toolingcaution

The project uses Make and Composer build tooling, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkout or script injection, but all 5 action references are unpinned. A low-confidence cache-poisoning finding is also present; it is a hygiene concern rather than a confirmed severe risk.