gerarjos14/laravel-pagoflash

Release historycaution

Only one release has been published, with no established release cadence over its 135-day history. This limits evidence of sustained maintenance, though the repository is not archived and the package is still relatively new.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a payment integration package.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all four referenced actions are unpinned. That leaves build inputs less reproducible and easier to change unexpectedly.