victoryoalli/laravel-string-macros

Project backingcaution

The package and repository are owned by the same individual account. This supports clear ownership, but provides less organizational continuity than a backed project.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release provides some compensating evidence, but the short-term development pause still raises maintenance concern.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected, leaving dependency and build-risk checks less comprehensive.

Security policycaution

The repository has no security policy, making its process for reporting and handling vulnerabilities unclear.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkouts, injection findings, or top-level write permissions. However, the CI uses five unpinned references, including a high-confidence high-severity unpinned container image, so build inputs are not fully reproducible.