inisiatif/laravel-pago

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which lowers confidence in prompt maintenance despite the recent release history.

Security policycaution

The repository has no security policy, leaving users without a documented channel or process for reporting vulnerabilities.

Workflow auditcaution

All five workflows were analyzed, but all 13 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; its pull_request_target trigger and top-level write permission add workflow hygiene risk, though no untrusted checkout or script injection was found.