onetracepro/onetrace-laravel

Release historycaution

This is the package's first release, published 0 days ago, so there is no release history to demonstrate sustained maintenance or stability.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, but the repository was created and pushed immediately before this first release, so this is mainly limited maintenance evidence rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency gap for handling vulnerability reports, though it is not evidence of an unsafe release by itself.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no injection or high-severity findings. However, all 4 action references are unpinned, weakening build reproducibility and supply-chain protection.