notideus/laravel-notideus

Release historycaution

This is the first release, published today, so there is no release track record or established cadence yet. That reflects limited evidence rather than abandonment.

Repo commit activitycaution

There were no commits or active maintainers during the last three months, but the repository and package were created today, so this is insufficient history rather than evidence of a collapsed project.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest repository hygiene gap for a package handling API credentials.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four analyzed action references are unpinned, weakening build reproducibility. The high-confidence template-injection findings are in a publish workflow, but no untrusted checkout or injection trigger was reported, so they remain hygiene concerns rather than a severe risk.