lomkit/laravel-rest-api

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. The build setup is present, while automated security coverage is not evident.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although recent releases and active commits provide compensating maintenance evidence.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous sinks or audit findings, and one scopes permissions at job level. However, all five action references are unpinned, which leaves workflow dependencies less reproducible.