rcommerz/logger-laravel

Workflow auditdanger

Both high-confidence template-injection findings are in workflows, including a workflow_run workflow, which makes the automation a supply-chain concern rather than mere cosmetic hygiene. All 16 action references are unpinned, and two workflows grant top-level write access, adding further workflow risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package whose latest release was months earlier, this is meaningful evidence of slowing maintenance.

Repo popularitycaution

The repository has no stars, forks, or watchers. Popularity is only supporting evidence, so this lowers maturity confidence modestly but is not decisive for a young package.

Security policycaution

No repository security policy was found. This is a modest transparency gap for a package handling logging and sensitive-header redaction, but it is not severe on its own.