avto-dev/firebase-notifications-laravel

Repo popularitycaution

The repository has only 1 star and 7 forks, indicating limited adoption evidence. Popularity is supporting evidence rather than a decisive health measure, and the recent release and project practices compensate for the small audience.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected. This is a transparency and hardening gap, though it is not severe given the other repository evidence.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear. This lowers transparency but does not by itself indicate that the package is unsafe to depend on.

Token permissionscaution

The single workflow has no top-level GitHub Actions token permissions declaration. No write permissions or dangerous workflow patterns were detected, but explicitly restricting permissions would provide stronger build-security hygiene.