spatie/laravel-health

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected; this is a transparency gap, though the active project and safe workflow findings provide compensating evidence.

Security policycaution

No security policy was found in the repository, leaving the preferred process for reporting vulnerabilities unclear.

Token permissionscaution

All four analyzed workflows lack top-level token permissions declarations. None requests top-level write access, so this is a workflow-hardening gap rather than evidence of an actively dangerous configuration.