blutrixx/nativephp-fcm

Package scaffoldingcaution

The artifact includes a substantial README and a changelog, but neither the package nor repository contains tests. For a mobile notification plugin, the missing automated test coverage is a genuine maintenance and regression concern.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured. The missing scanning is a transparency gap for a package handling mobile notification integration, though it is not by itself evidence of unsafe code.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less clear for adopters.