chinleung/nova-autofill

Project backingcaution

The registry namespace and repository owner match, but both identify a single user account rather than an organization. This supports package identity while leaving limited visible backing capacity.

Release historycaution

The package has had 4 releases since October 2019, but none in the last 12 months and the latest registry release was in March 2022. Recent repository activity partly offsets the stale release cadence, but consumers may be relying on an old published version.

Repo bus factorcaution

All recent repository commits came from one contributor, so maintenance depends heavily on a single person. The repository is user-owned rather than organization-owned, offering no shown organizational handoff capacity.

Repo toolingcaution

The project uses Composer for builds, but no security scanning tools were detected. For this small PHP package, that is a modest transparency and maintenance gap rather than a standalone severe risk.