henrotaym/laravel-test-suite

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful sign of slowing maintenance even though a release was published during the broader period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a transparency and detection gap for a package intended for development workflows.

Security policycaution

The repository has no security policy, reducing clarity for reporting and handling vulnerabilities.

Workflow auditcaution

All three analyzed action references are unpinned, and the release workflow uses an app token with blanket installation permissions; it also relies on trusted publishing rather than short-lived credentials. The workflow was fully analyzed and had no untrusted checkout or script-injection findings.