jgawlik/laravel-journal

Release historycaution

This is the package's first release, published today, so there is no track record yet for sustained maintenance or release stability.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

All six workflow action references are unpinned, which weakens build reproducibility; this is partly offset by read-only job permissions and no detected untrusted checkout or injection sinks.