henrotaym/laravel-api-client

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, indicating that maintenance activity has recently stopped despite the package having a long release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear for a package intended to be used as a library.

Workflow auditcaution

All 3 analyzed action references are unpinned, and the workflow has a high-confidence finding that an app token inherits blanket installation permissions. The single workflow has no untrusted checkout or script-injection path, which limits the severity.