sierratecnologia/fabrica

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding execution during dependency operations and requiring more trust than a package without install-time behavior.

Release historycaution

The latest registry release was about five years ago, with no releases in the last 12 months; this is a meaningful maintenance concern despite 11 releases overall.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, weakening evidence of current maintenance even though the repository is not archived.

Version stabilitycaution

Version 0.4.3 is not a stable-major release, which increases compatibility uncertainty for a package whose published release is already several years old.

Workflow auditcaution

All 18 analyzed action references are unpinned, which leaves workflow dependencies exposed to tag or branch changes. The audit found no untrusted checkouts, script injection, write-wide permissions, or other reported findings.