timgavin/laravel-block

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. The recent release history partly offsets this, but the absence of current development activity raises support risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully and no dangerous audit findings were reported, but all 3 action references are unpinned and one workflow grants top-level write permissions. These are workflow-hygiene weaknesses without an observed untrusted trigger or sink.