leafs/fetch

Release historycaution

The package has existed since October 2021 and released twice in the last 12 months, but its median release interval is about 416 days, indicating a slow cadence.

Repo bus factorcaution

All six recent commits came from one contributor, leaving the project dependent on a single active maintainer despite organization ownership.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

The repository has no documented security policy, which weakens vulnerability-reporting transparency for an HTTP client.

Workflow auditcaution

Both workflows were analyzed with no audit findings or untrusted-checkout sinks, but all four action references are unpinned, reducing build reproducibility.