novius/laravel-nova-news

Dependency profilecaution

The release has 10 runtime dependencies, including Laravel Nova and several Novius and Spatie packages; this is a meaningful integration surface but not unusually broad for a Nova feature package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past 3 months. Four releases in the past 12 months partly offset this, but the recent source-activity gap remains a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but all 9 action references are unpinned, weakening build reproducibility; the absence of a top-level permissions block is acceptable on its own.