wotz/laravel-locale-collection

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the July push and April release provide some compensating evidence.

Security policycaution

The repository has no SECURITY.md policy. The README supplies a security contact, which partly compensates for the missing formal policy but leaves disclosure guidance less explicit.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned. High-confidence bot-condition and template-injection findings add workflow hygiene risk; the pull_request_target trigger has no untrusted checkout or script-injection sink, so this is caution rather than danger.