cornford/notifier

Project backingcaution

The repository is owned by an individual user rather than an organization, and the registry maintainer count is one. This indicates a thin visible backing structure and increases continuity risk alongside the stale release history.

Release historycaution

The package has 18 releases since 2015, but none in the last 12 months and its latest release was in November 2020. This long period without releases raises maintenance and compatibility risk.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools are reported. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.

Version stabilitycaution

The assessed release is marked stable and not a prerelease, which supports predictable adoption. However, the reported latest version is v1.5.1 while the assessed version is v2.2.1, creating a registry-version consistency concern.