square1/resized-laravel

Repo commit activitycaution

The repository had no commits and no active maintainers in the three months before collection. Although the release history shows recent publishing, this indicates currently quiet source maintenance.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving disclosure and response expectations unclear. This lowers transparency but is not severe enough to make the release unfit on its own.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 4 of 4 action references are unpinned. That creates avoidable workflow reproducibility and update risk.