packagefactory/atomicfusion-proptypes

Release historycaution

The package has existed since 2018 with 14 releases, but only one release occurred in the last 12 months and the latest was about 9 months ago. This indicates a slow cadence, though the project is not abandoned solely on this evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the slow release cadence, this raises concern about responsiveness and ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, creating a build-reproducibility and update-hygiene concern.