spatie/laravel-one-time-passwords

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent for a security-sensitive authentication package.

Workflow auditcaution

All four workflows were analyzed with no audit findings and no untrusted checkout or script-injection sinks. However, all 9 action references are unpinned and three workflows grant top-level write permissions, creating a mild workflow-hygiene concern.