yamad/laravel-fcm

Release historycaution

The package is only 29 days old and has one release, so there is not yet enough release history to demonstrate sustained maintenance. Its recent publication means this is an early-stage concern rather than evidence of abandonment.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency gap for a package handling authentication dependencies and outbound API requests.

Security policycaution

The repository has no security policy. For a package using Google OAuth credentials and sending messages through an external API, this leaves vulnerability-reporting expectations unspecified.

Version stabilitycaution

Version v0.1.0 is not a stable major release, which suggests the API may still change. It is not marked as a prerelease, providing some compensation for the early version number.