marjose123/laravel-nuxtui-starter-kit

Dangerous workflowscaution

One workflow uses pull_request_target, although no untrusted checkout or script injection was detected; this warrants review but is not severe on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful maintenance concern despite the recent push timestamp and release history.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a starter kit handling authentication and API functionality.

Token permissionscaution

Five workflows omit top-level permissions and two request top-level write access, reducing least-privilege transparency and increasing workflow-maintenance risk.