spatie/laravel-multitenancy

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected; the missing scanner is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package used in application infrastructure.

Workflow auditcaution

All three workflows were analyzed without untrusted triggers or script injection, but all 8 action references are unpinned and a high-confidence audit finding identifies an unpinned container image, weakening build reproducibility.