fissible/attest-laravel

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of adoption signals limits external validation for this young package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene less visible.

Security policycaution

The repository has no security policy, so it does not document a dedicated process for reporting and handling vulnerabilities.

Version stabilitycaution

The assessed v1.1.0 is a stable major release and not a prerelease. The recent prerelease share is high at 72.7%, so the broader project has still been evolving quickly.

Workflow auditcaution

Both workflows were analyzed successfully with no detected injection or high-confidence audit findings, but all three action references are unpinned and one workflow grants top-level write permissions, creating avoidable workflow hygiene risk.