bymayo/porter

Maintainerscaution

Only one registry publishing maintainer, ByMayo, is listed. This is a continuity concern for a user-owned project because publishing capability is concentrated, with no organization backing shown by the project_backing signal.

Project backingcaution

The repository owner is the user account bymayo rather than an organization, so the single-maintainer and bus-factor concerns are not mitigated by organizational backing.

Repo bus factorcaution

All 10 commits in the last three months came from one contributor, giving a 100% top-contributor share. Without organization backing or a second active contributor, this creates a genuine continuity risk.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are detected. The build tooling is appropriate, while the missing scanning reduces supply-chain transparency.

Security policycaution

No repository security policy is present. This is a transparency gap for a plugin handling authentication, passwords, magic links, and account operations, although its absence alone does not demonstrate unsafe maintenance.