modernmcguire/overwatch

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This is a meaningful execution surface during installation, but the signal does not show that the script is harmful or unusually broad.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were merged in the last month. This is a small maintenance-activity gap, partly offset by recent commits and the current release.

Repo popularitycaution

The repository has zero stars and forks, with three watchers. Low visibility limits community validation and outside support, although popularity is supporting evidence rather than a health verdict.

Security policycaution

The repository has no security policy. For a Laravel package exposing an HTTP endpoint and handling a secret key, that reduces vulnerability-reporting transparency.

Workflow auditcaution

All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script-injection findings, so this is a workflow-hygiene concern rather than a severe direct risk.