jobmetric/laravel-setting

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, though the same period includes a new registry release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package used in applications.

Workflow auditcaution

All four workflows were analyzed without reported audit findings, and pull_request_target triggers have no untrusted checkout or script-injection sinks. However, all four action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow hygiene risk.