spatie/pest-plugin-route-testing

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported, though this is a limited concern for a small testing plugin.

Workflow auditcaution

All eight analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkout, injection, or high-confidence security finding, so this is a hardening concern rather than a severe risk.