esign/laravel-conversions-api

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance concern. A release during the period provides some compensating evidence, but does not show ongoing development capacity.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

All 2 analyzed action references are unpinned, weakening build reproducibility and update integrity. The workflow has no dangerous triggers, untrusted checkouts, script injection, or audit findings, which limits the impact to caution rather than danger.