alaouy/youtube

Maintainerscaution

Only one registry maintainer is listed. That is a limited publishing base for a user-owned project and increases continuity risk if that maintainer becomes unavailable.

Project backingcaution

The package and repository are owned by the same individual user, so the source linkage is clear, but there is no organization backing shown to compensate for the narrow maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. A recent release partly offsets this, but the lack of ongoing source activity is a meaningful maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. This is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.