ikoncept/fabriq

Registry deprecationdanger

Packagist marks the entire package as abandoned and points to a replacement, so this release should not be treated as the maintained dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This weakens evidence of current maintenance capacity.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is secondary to the package being abandoned.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkout or script-injection findings, but all six action references are unpinned and a high-confidence finding reports a floating container image using the latest tag.