jobmetric/laravel-package-core

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a maintenance concern despite the strong registry release cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All three workflow action references are unpinned, which weakens reproducibility and update control. The pull_request_target trigger has no untrusted checkout or script-injection sink, and no high-confidence audit findings were reported.