viicslen/laravel-trackable-tasks

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scan reduces supply-chain visibility without proving that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented. This is a transparency gap, though it does not by itself show abandonment.

Workflow auditcaution

All 14 referenced actions are unpinned, and the audit found a high-confidence unpinned container image plus medium-confidence inherited secrets in the release workflow. No dangerous trigger or untrusted checkout was found, so this is a caution rather than a severe verdict.