deegitalbe/laravel-trustup-io-storecove

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and hygiene gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy. This makes vulnerability reporting less transparent, though active releases and recent commits partly offset the gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injections, but all 3 of 3 action references are unpinned. It also has a high-confidence broad GitHub App token finding and a trusted-publishing finding, warranting caution around the release workflow.