spatie/fractalistic

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. A recent release and June push provide some compensation, but the current maintenance signal is still weaker than ideal.

Security policycaution

No repository security policy was found. This is a modest transparency gap for reporting vulnerabilities, but it does not by itself indicate abandonment.

Workflow auditcaution

All three workflows were analyzed without audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all six action references are unpinned and one workflow has top-level write permissions, creating moderate build-integrity and permission-hygiene concerns.