xefi/faker-php-laravel

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a real maintenance concern, although the latest release was published during that period.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, lowering project transparency.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or untrusted triggers, and one scopes permissions at job level. However, all 5 action references are unpinned, so workflow dependencies can change without a reviewed commit.