austral/list-bundle

Maintainerscaution

Only one registry account has publish access, which limits publishing redundancy; the organization-owned repository provides some compensating project backing.

Release historycaution

The package has only four releases and no release in about two years; this is a meaningful maintenance concern, although the repository was pushed more recently than the latest registry release.

Repo commit activitycaution

The repository has no commits and no active maintainers in the last three months, a concrete sign that maintenance may have slowed even though it is not archived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. For this small package this is a transparency gap rather than a severe standalone risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a modest transparency concern for a dependency.