chani/safi-component-blog

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file. This creates a significant adoption and redistribution constraint for a package presented as an open-source dependency.

Release historycaution

The package is only 51 days old and has two releases, both published on the same day. Recent repository activity helps, but release history still provides limited evidence of sustained maintenance.

Repo bus factorcaution

One contributor made all eight commits in the past three months, leaving no demonstrated backup maintainer. The repository is user-owned rather than organization-owned, so this concentration is a real continuity concern.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response. The absence is a maintenance and disclosure gap, though it is not evidence of a security incident.

Version stabilitycaution

Version v0.1.1 is not from a stable major version, so the public API may still change. It is not marked as a prerelease, which partly offsets the concern.