sextanet/laravel-files

Lifecycle scriptscaution

A post-autoload-dump install script is present, adding some install-time execution surface, though this is a common Composer package pattern and no more severe behavior is shown.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release.

Repo popularitycaution

One star and no forks provide little evidence of community adoption, although popularity is supporting evidence and does not by itself indicate poor package health.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the pull_request_target workflow has no untrusted checkout or script-injection sink, limiting the severity.