laraditz/security-scanner

Release historycaution

This is the package's only release, published 203 days ago, with no subsequent release activity. That provides limited evidence of ongoing maintenance for a security-focused package.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the one-release history and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest gap rather than a severe risk because the package has tests and a defined source tree.

Security policycaution

The repository has no security policy, which is a meaningful transparency gap for a package whose purpose is scanning security vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving weaker build reproducibility and action-integrity controls.