idstack/laravel-fcm

Release historydanger

This package has only one release, published in November 2017, and none in the past 12 months; the long absence of releases is strong evidence of abandonment risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present; this is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.

Repository archivedcaution

The repository is not archived, which is a positive, but it was last pushed in November 2017 and does not offset the prolonged lack of activity shown by the release history.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that sends Firebase notifications.