sammyjo20/saloon-laravel

Registry deprecationdanger

Packagist marks the entire package as abandoned and explicitly names saloonphp/laravel-plugin as its replacement. The active repository partly offsets abandonment risk, but the registry status makes this release a poor dependency choice.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link is not fully transparent. The organization backing and matching source file tree provide some compensation, but the association remains a caution.

Repo toolingcaution

The project uses Composer, but no security-scanning tool was detected. The missing scanner is a modest transparency and hygiene gap, not a standalone adoption blocker.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response, creating a maintenance-process concern.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkouts, but all 8 action references are unpinned and one workflow grants top-level write access. These are workflow hygiene concerns without an observed exploit path.