vinkius-labs/laravel-page-speed

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the recent registry release and historical release volume.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, leaving recent community and maintainer responsiveness un demonstrated. Fifteen open issues and five open pull requests add context but do not prove abandonment.

Security policycaution

The repository has no published security policy. This is a transparency gap for a package that includes web and API security-related middleware, although the repository does use automated security scanning.

Workflow auditcaution

All 10 action references are unpinned, and three workflows grant top-level write permissions; the audit also found a high-confidence bot-condition issue in auto-merge where actor context may be spoofable. No untrusted checkout or script-injection path was found, but the combined automation weaknesses warrant caution.