beromir/neos-studio-icon-select-editor

Project backingcaution

The registry namespace and repository owner match, but both are user-owned rather than organization-backed. This supports package identity while offering limited evidence of backup maintenance capacity.

Release historycaution

The package is young at 54 days with four releases, including a release today, showing active early development. Its short history leaves limited evidence of long-term maintenance.

Repo bus factorcaution

All recent commits came from one contributor, so maintenance depends heavily on a single person. The matching registry and repository user provides ownership continuity but does not reduce the single-contributor risk.

Repo commit activitycaution

There was one commit in the last three months, but it was made recently and the repository also shows four merged pull requests in the last month. This supports current activity but not yet a deep maintenance track record.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools are present. For this small package that is a transparency gap rather than a severe supply-chain risk.