vizor-vr/laravel-vizor

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest gap in automated security hygiene.

Version stabilitycaution

v0.6.1 is a non-prerelease release, although the package remains on the 0.x major line, so its API may still evolve.

Workflow auditcaution

All four workflows were analyzed, but all eight action references are unpinned, and sync-player-version.yml has two high-confidence template-injection findings. No untrusted checkout or dangerous trigger was reported, so this is a workflow-hygiene concern rather than a severe release risk.