offline-agency/laravel-cart

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. The recent repository push is a compensating sign, but the current activity gap still raises maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This is a modest disclosure-process gap, though it is partly offset by the package's active repository and documented project structure.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers, untrusted checkouts, or audit findings, and two scope permissions at job level. However, all eight action references are unpinned, which weakens build reproducibility and supply-chain hygiene.