keerill/laravel-http-client-logger

Dangerous workflowscaution

One of four workflows uses pull_request_target, although no untrusted checkouts or script-injection patterns were detected. The privileged workflow adds some automation risk but is not severe on this evidence.

Lifecycle scriptscaution

The package declares a post-autoload-dump Composer lifecycle script. This is an install-time execution point and deserves review, but the signal provides no evidence that the hook is harmful.

Project backingcaution

The repository is owned by an individual rather than an organization, so continuity depends on a small personal project owner. This is partly offset by the recent release, pull-request merges, and existing repository tooling.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite a recent release and pull-request activity. That gap weakens evidence of ongoing hands-on maintenance.

Security policycaution

The repository has no security policy. For a library that handles HTTP request and response logging, the absence reduces vulnerability-reporting transparency.