dipesh79/laravel-action-dto

Maintainerscaution

Registry publishing access is held by one maintainer, which leaves limited visible publishing redundancy. The linked repository is also owned by that user, so this is a modest capacity concern rather than a severe risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, weakening evidence of ongoing maintenance after the initial release period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap for a package intended for application integration.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The workflow uses read-only permissions and has no detected dangerous sinks or audit findings, but all five action references are unpinned, leaving them exposed to upstream reference changes.