nunomaduro/laravel-starter-kit

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful maintenance warning that conflicts with the package's frequent registry releases.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and handling less transparent for consumers.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 10 action references are unpinned, weakening build reproducibility and supply-chain hygiene.