alister/todotxt-parser

Maintainerscaution

Only one registry account has publish access. This is consistent with the repository being user-owned, but it leaves publishing continuity dependent on one person.

Project backingcaution

The repository and registry package are owned by the same individual user, confirming that the package is directly backed by its source project but not by an organization.

Repo bus factorcaution

All recent commits came from one contributor, creating a material single-maintainer continuity risk despite the recent release.

Repo commit activitycaution

The repository recorded one commit in the last three months, showing recent activity but a very limited maintenance pace.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security coverage unconfirmed.