henrotaym/laravel-helpers

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. Although the release history shows recent publishing, the lack of recent source activity lowers confidence in ongoing maintenance.

Repo popularitycaution

The repository has no stars or forks and only one watcher. Popularity is not required for a healthy small package, but these figures provide little supporting evidence of external review or adoption.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. This is a modest transparency and oversight gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, which is a maintenance transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, but all 3 action references are unpinned and the audit found a high-confidence GitHub App token with blanket installation permissions. These workflow controls weaken release integrity and warrant caution.