diegobvasco/laravel-auth-cache

Lifecycle scriptscaution

The package runs a post-autoload-dump script during installation. This is an additional execution surface, but the signal provides no indication that the script is unsafe.

Repo bus factorcaution

All nine recent commits came from one contributor, so maintenance depends entirely on a single active developer.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The audit analyzed all four workflows and found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; seven of nine action references are also unpinned. No untrusted checkout or script-injection sink was found, which limits the severity.