spatie/fork

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which is a maintenance concern; the recent release and repository push provide partial evidence that this may reflect a quiet period rather than abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Token permissionscaution

Two workflows omit top-level token permissions and one declares top-level write access; although dangerous workflow patterns were not detected, least-privilege configuration is incomplete.