deegitalbe/laravel-trustup-io-authentification

Release historycaution

The package has 37 releases over about four years, but only one release in the last 12 months. The recent v4.0.0 release provides some evidence of ongoing maintenance, but the low recent cadence remains a concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release was pushed, this is still a meaningful maintenance-capacity concern.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. The missing scanning automation is a transparency and hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three analyzed action references are unpinned, and the high-confidence audit found an app token inheriting blanket installation permissions; the workflow also uses trusted publishing. These increase release-workflow exposure, though no untrusted checkout or script injection was found.