nickurt/laravel-pwned-passwords

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a maintenance concern, although a release was published during that period.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed without security findings or untrusted triggers, but both analyzed action references are unpinned and the workflow has no top-level permissions block. The unpinned references are a supply-chain hygiene gap, while the absent permissions block is acceptable on its own.