dcat-plus/laravel-admin

Dependency profilecaution

The package declares 11 runtime dependencies, including several substantial framework and document-processing libraries. This is a meaningful dependency surface, though not excessive for a Laravel administration toolkit.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a concrete warning that recent registry releases may not reflect ongoing source maintenance.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. The missing scanning layer weakens automated oversight for a package with a broad dependency surface.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and maintainer response expectations.

Workflow auditcaution

The single analyzed workflow had no audit findings and no dangerous trigger or token configuration, but 10 of its 15 action references are unpinned. This leaves avoidable build-integrity and reproducibility risk.