deegitalbe/laravel-trustup-io-model-commons

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which weakens evidence of ongoing maintenance despite the recent release.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little external evidence of adoption or community review; this is supporting evidence rather than a decisive concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, reducing automated coverage for dependency and code risks.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four analyzed action references are unpinned, and the release workflow has a high-confidence finding that its app token inherits blanket installation permissions; the audit found no untrusted checkout or script injection.