fidum/laravel-translation-linter

Release historycaution

The package has 13 releases over roughly three years and a release in the last 12 months, though only one release in that period indicates a modest cadence rather than rapid maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting expectations unclear; this is a transparency gap, though it is not by itself evidence of unsafe code.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. All 12 analyzed action references are unpinned and three workflows grant top-level write permissions; the absence of untrusted checkouts or script injection limits the severity, but workflow hygiene still lowers confidence in the release process.