jorijn/laravel-security-checker

Maintainerscaution

Only one registry publishing maintainer is listed. The matching user-owned repository and recent release provide some continuity, but the narrow publishing base increases succession risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance may have slowed despite the recent release.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented for consumers.

Workflow auditcaution

All workflows were analyzed with no audit findings or untrusted-code sinks, but both action references are unpinned. The missing top-level permissions block is acceptable on its own and no write-wide token was observed.