codewithkyrian/onnxruntime-downloader-plugin

Maintainerscaution

One registry publishing maintainer creates a thin operational base, although the repository and package are small enough that this is a moderate rather than severe concern.

Release historycaution

The package has only two releases, both published in April 2024, with no releases in the following 12 months; this indicates limited maintenance momentum for a dependency that downloads native binaries.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly two years and five months without a new release or repository push.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; for a plugin that downloads platform-specific binaries, this is a meaningful hygiene gap.

Security policycaution

The repository has no security policy, which weakens the project's process transparency and gives consumers no documented route for reporting vulnerabilities.