vortech/laravel-fuse

Release historycaution

This is the package's first release, published today, so there is no release track record yet. That is a real maturity gap, but it is expected for a new project rather than evidence of abandonment.

Repo commit activitycaution

The repository has no commits and no active maintainers in the last three months, but the package was released today, so this mostly reflects its newness rather than a demonstrated collapse in maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest transparency and hygiene gap, not a severe dependency risk on its own.

Security policycaution

The repository has no security policy. For a new package this lowers disclosure transparency, though it is not evidence that the package is unsafe.

Workflow auditcaution

All three workflows use read-only permissions and the audit found no high- or medium-confidence findings, which is good. However, all 8 analyzed action references are unpinned, leaving workflow supply-chain inputs less reproducible.