backstage/laravel-permanent-cache

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Although the recent push and release history provide some compensating evidence, the absence of observed development activity is a meaningful maintenance concern.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no SECURITY.md or other security policy. That weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.

Workflow auditcaution

All 8 analyzed action references are unpinned, and one workflow grants top-level write permissions; these are workflow hygiene weaknesses. The audit analyzed all 3 workflows, found no untrusted checkout or script-injection sinks, and reported no higher-confidence findings.