deegitalbe/laravel-trustup-io-ubl-to-html

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months, which weakens evidence of ongoing maintenance despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest verification gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All three analyzed action references are unpinned, and the workflow has a high-confidence blanket GitHub App token permission finding; the audit also reports trusted publishing, which is a workflow hygiene concern.