sextanet/laravel-webpay

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months, which weakens evidence of current maintenance even though the release history shows activity over the past year.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although Dependabot is enabled as partial security tooling.

Workflow auditcaution

All 9 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects a pull_request_target workflow; no untrusted checkout or script injection was found to raise this to severe risk.