cleaniquecoders/laravel-config-webhook

Dangerous workflowscaution

Five workflows were analyzed with one pull_request_target workflow for Dependabot automation, but no untrusted checkouts or script-injection patterns were detected; the special workflow still warrants review before relying on the project’s automation.

Release historycaution

Only two releases were published over about 100 days, with both arriving within roughly 17 hours; this is a young project with limited evidence of a sustained release pattern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. For a package this new, that is a meaningful maintenance concern, even though the repository is not archived.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear for a package that handles outgoing webhook credentials and delivery behavior.

Token permissionscaution

Three workflows request top-level write permissions and two omit top-level permissions entirely, indicating weaker-than-ideal CI permission hygiene.