ditscheri/laravel-throttle-snooping

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although the latest release was recent, this leaves current maintenance activity uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, reducing automated oversight of a package that handles request-throttling behavior.

Security policycaution

The repository has no security policy. The README provides a reporting email, but the absence of a formal policy leaves vulnerability-handling expectations less transparent.

Workflow auditcaution

All five workflows were analyzed, but all 11 action references are unpinned. High-confidence findings also flag spoofable bot conditions and an unpinned container image; the pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene risks rather than a severe package-level risk.