npav/laravel-fcm-push

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration has no visible organizational handoff support.

Release historycaution

The package is only 45 days old with three releases, all within the last 12 months; the roughly three-day release interval shows early activity but provides limited long-term maintenance evidence.

Repo bus factorcaution

One contributor made all 16 commits in the last three months, leaving the project dependent on a single maintainer and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-maintenance practices less transparent.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.