leroy-merlin-br/mongolid-laravel

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and July push provide some compensation, but the current maintenance pause is a real concern.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that integrates with Laravel and MongoDB.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens workflow reproducibility. The audit is complete and found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings; the missing top-level permissions block is acceptable on its own.