catlabinteractive/charon-laravel

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed and uses job-level permissions, with no dangerous triggers or audit findings. However, both action references are unpinned, weakening build reproducibility and supply-chain protection.