elhebert/laravel-sri

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance concern, though the release history shows two releases in the last year and a recent version release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency for a package used in application security-related markup.

Workflow auditcaution

All six workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 18 action references are unpinned, which leaves avoidable workflow supply-chain exposure.