spatie/laravel-directory-cleanup

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but the quiet development period modestly increases maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence of unsafe code by itself.

Workflow auditcaution

All seven action references are unpinned, and the audit found a high-confidence unpinned container image in php-cs-fixer.yml. No dangerous triggers, untrusted checkouts, script injection, or broad top-level write permissions were found.