larasell-dev/larasell

Release historycaution

The package is only 46 days old but has 29 releases, with a median interval of about 2 hours. This shows strong activity, though the short history leaves maturity less established.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and hygiene gap, not evidence of unsafe code by itself.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility. One workflow also grants top-level write access, but the audit found no untrusted checkouts, script injection, or high-severity findings.