cleaniquecoders/laravel-config-sso

Release historycaution

The package is young at about 105 days and has three releases, all clustered within roughly one day. That shows an initial release push but provides little evidence of a sustained cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package only about 105 days old, that is a meaningful warning about ongoing maintenance capacity.

Security policycaution

No repository security policy was found. This is a transparency gap for a package handling SSO configuration and encrypted credentials, though it is not evidence of unsafe code by itself.

Workflow auditcaution

All five workflows were analyzed with no reported audit findings or untrusted checkout and script-injection sinks. However, all 12 action references are unpinned and three workflows grant top-level write access, creating a workflow-hygiene concern even without a corroborating sink.