zackaj/laravel-debounce

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release push is some compensating evidence, but the lack of broader activity still raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The audit covered both workflows with no dangerous triggers, untrusted checkouts, or findings, and one workflow uses read-only permissions. However, all 5 action references are unpinned, leaving avoidable reproducibility and action-change risk.