binafy/laravel-score

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance and abandonment concern despite the recent package release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest process gap for a dependency intended for application use.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, although it is not evidence of unsafe code by itself.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings, and one workflow uses read-only permissions. However, all 3 analyzed action references are unpinned, weakening build reproducibility and supply-chain hygiene.