farayaz/laravel-spy

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. That is a real maintenance concern, despite the recent release and non-archived repository.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package that logs outgoing requests and may handle sensitive data, this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, and it does not grant top-level write access. However, all three action references are unpinned and one uses an archived action, creating workflow maintenance and reproducibility concerns.