moneo/laravel-morphmap

Release historycaution

The package has existed for over two years and has a recent release, but only one release occurred in the last 12 months and the release history is sparse.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months; although the package was released recently, this leaves current maintenance capacity uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. However, all 6 action references are unpinned, which weakens build reproducibility and supply-chain control.