angrybytes/fractal

Release historycaution

This package has only one release, published in December 2021, with no releases in the last 12 months. That makes the release look abandoned rather than actively maintained.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no source updates since December 2021. The repository is not archived, but this does not offset the prolonged inactivity.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling was detected. This is a modest process gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it is less significant than the long inactivity.

Workflow auditcaution

All six analyzed action references are unpinned, which weakens build reproducibility and update control. The audit found no untrusted checkouts, script injection, or higher-confidence dangerous findings.