eveseat/notifications

Dependency profilecaution

Eight runtime dependencies reflect a substantial Laravel and SeAT integration surface; the profile is understandable but increases reliance on coordinated upstream maintenance.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. This is a meaningful maintenance concern, although the release was published during that period.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected, leaving a modest transparency and monitoring gap.

Security policycaution

The repository has no security policy, so its vulnerability-reporting process is not documented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Its one action is unpinned, which weakens build reproducibility, while the lack of a top-level permissions block is acceptable on its own.