jeremykenedy/laravel-blocker

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; automated security tooling partly compensates but does not replace a reporting process.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout, script injection, or audit findings. Three of eight action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.