azaharizaman/nexus-policy-engine

Release historycaution

This is the only release in 138 days, so there is not yet enough release history to demonstrate sustained maintenance. That is a meaningful maturity concern for a package still at an alpha version.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. For a package with only one alpha release, this weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest assurance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented. This matters for a package intended to evaluate authorization and workflow policies.

Version stabilitycaution

The assessed version is v0.1.0-alpha1, and all recent releases are prereleases. Consumers should expect instability and possible API changes.