interaction-design-foundation/laravel-geoip

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern, despite the recent release and later repository push evidence.

Security policycaution

The repository has no published security policy. This is a transparency and vulnerability-reporting gap, but it is moderated by the presence of Dependabot and Psalm tooling.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in a workflow. The workflows have no top-level permissions blocks, which is acceptable on its own, but the unpinned image is a real supply-chain hygiene concern.