devaspid/safi-laravel-client

Release historycaution

This is the package's first release, published today, so there is no release history or demonstrated maintenance cadence yet. Its newness limits confidence but does not by itself indicate abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. The small, newly published project provides no supplied evidence that compensates for this gap.

Workflow auditcaution

The workflow audit completed successfully with no dangerous triggers or audit findings, but both of its action references are unpinned. The missing top-level permissions block is acceptable on its own, so the main concern is weaker build reproducibility.