globus-studio/fingerprint

Release historycaution

This is a 125-day-old package with only one release and no established release cadence, so its maintenance track record is still limited.

Repo bus factorcaution

All recent repository activity is concentrated in one contributor with 100% of commits, leaving little demonstrated redundancy if that maintainer becomes unavailable.

Repo commit activitycaution

The repository had only one commit in the last three months from one active maintainer; this is a meaningful maintenance-capacity concern for a new library.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the project's CI and documentation partly compensate for this hygiene gap.

Token permissionscaution

Both workflows lack top-level token permission declarations. No write permissions were observed, but explicitly restricting workflow tokens would provide stronger security hygiene.