spatie/laravel-honeypot

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented and creating a modest transparency gap.

Token permissionscaution

None of the three workflows declares top-level token permissions, so least-privilege intent is not explicit; no workflow requests top-level write access, which limits the practical concern.