sunaoka/laravel-ssm-parameters-loader

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For this small package this is a modest transparency gap rather than a severe dependency risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear. This lowers transparency but is not by itself evidence of abandonment.

Token permissionscaution

The single workflow has no top-level GitHub Actions permissions declaration. No write permissions or other dangerous workflow patterns were detected, so the concern is limited to defensive configuration hygiene.