managemize/laravel-fingerprints

Release historydanger

The latest release was published in January 2023, and there have been no releases in the last three years. That substantially raises abandonment risk despite eight total releases.

Maintainerscaution

Only one registry account has publish access, which limits publishing redundancy. The linked repository is owned by the same individual, so this reflects a small project rather than an ownership mismatch.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a meaningful maintenance concern, though the repository is not archived.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. This is a transparency gap for a package used in applications.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both action references are unpinned. The clean audit offsets the pinning gap partly, not completely.