dkvhin/laravel-sri

Release historycaution

This package has had only one release, published about 12 months ago, with no releases in the past 12 months. That limited history and lack of recent releases reduce confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. With only one release overall, there is little observed evidence of continuing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves a gap in the project's visible security checks.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.

Workflow auditcaution

All four workflows were analyzed without dangerous audit findings, and none grants top-level write access. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.