friendsofcake/fixturize

Release historycaution

The package has 11 releases over more than 10 years, but none in the last 12 months; this indicates slow or paused maintenance, though not abandonment by itself.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, consistent with the lack of releases in the last year and raising maintenance concerns.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and upkeep gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned, weakening build reproducibility.