spatie/color

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful recent-maintenance gap, although the release history shows activity within the last year.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a small library this is a limited disclosure-process gap, but it reduces transparency for reporting vulnerabilities.

Workflow auditcaution

All three workflows were analyzed, with no untrusted checkouts or script injection, but all seven action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.