faustoff/laravel-contextify

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance warning. However, the package released 8 times in the last 12 months and the repository was pushed on February 28, 2026, so this does not by itself indicate abandonment.

Repo toolingcaution

Composer is used for builds, but no repository security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of unsafe code on its own.

Security policycaution

The repository has no published security policy. This makes vulnerability reporting less transparent, though active releases and complete project documentation partly offset the gap.

Workflow auditcaution

The sole workflow was fully analyzed with no detected injection, untrusted-checkout, or high-confidence audit findings. However, all 3 action references are unpinned, leaving them exposed to upstream reference changes; the absence of a top-level permissions block is acceptable on its own.