grazulex/laravel-arc

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some counterevidence, but the short-term maintenance record is still thin.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap rather than evidence of unsafe code.

Workflow auditcaution

All three workflows were analyzed without untrusted checkouts or script-injection findings, and two have read-only permissions. However, all 7 action references are unpinned, one release workflow grants top-level write access, and high-confidence template-injection findings in release.yml warrant workflow hygiene caution.