wotz/laravel-online-scope

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance for a current release.

Security policycaution

The repository has no SECURITY.md policy. The README provides a vulnerability reporting email, which partly compensates but is less explicit than a repository security policy.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found high-confidence bot-condition and template-injection findings. The pull_request_target workflow had no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a severe dependency risk.