enflow/laravel-svg

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Recent registry releases provide some compensation, but this still indicates limited visible development activity.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence that the package is unsafe.

Workflow auditcaution

All six analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script injection, so the workflow risk is material but not severe on its own.