beyondcode/laravel-favicon

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful maintenance concern, though the recent release and June push provide some compensating evidence.

Security policycaution

No repository security policy was found. This is a transparency gap, but it is partly offset by Dependabot-based security tooling.

Workflow auditcaution

All three workflows were analyzed, but all six action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. There are no untrusted checkouts or script injections, so this is a hygiene concern rather than a severe workflow risk.