whilesmart/eloquent-model-configuration

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite its earlier release activity.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and disclosure expectations less transparent.

Workflow auditcaution

All five analyzed action references are unpinned, two workflows grant top-level write permissions, and a high-confidence audit found an ad hoc package install; these are workflow hygiene and supply-chain weaknesses, though no high-severity findings or untrusted checkouts were reported.