ju1ius/fusbup

The linked project is active, licensed, documented, and has tests, but its workflow references are all unpinned and one workflow grants broad write access. A single active organization-backed maintainer reduces, but does not remove, the adoption risk.

Latest 1.0.14

Packagist

22%

Total Score

Maintainer Stability

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package abandoned at package scope, which is a severe adoption and maintenance warning even though the listed replacement is the same package name.

Release history

The package has 42 releases and was last released on October 24, 2025, but only one release appeared in the prior 12 months, indicating sharply reduced release activity.

Repo tooling

The project uses Composer build tooling, but no security-scanning tools were detected, leaving a modest transparency gap.

Security policy

The repository has no security policy, leaving reporting and response expectations undocumented for a library that processes domain and public-suffix data.

Workflow audit

All 9 action references are unpinned, and one workflow has top-level write permissions; no untrusted checkout, injection, or high-severity audit findings were reported, so this is a hygiene caution rather than a severe workflow risk.