aseqbase/lexicon

Maintainerscaution

Only one registry account has publish access. That is normal publishing hygiene for an organization-backed project, but it still leaves release access concentrated.

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance dependency. Organization backing provides some handoff capacity but does not remove the observed concentration.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months. This is limited recent maintenance, although the package's regular release history provides some compensation.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tool was detected. For a data-focused package this is a modest transparency and maintenance gap, not a severe risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though the package is primarily a collection of lexicon data rather than complex executable code.