crustum/blazecast

Dependency profilecaution

The package declares 16 runtime dependencies for a WebSocket server plugin, including networking, Redis, authentication, and framework components. That breadth increases upgrade and compatibility maintenance burden, although it is consistent with the package's stated functionality.

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers over the last three months. Despite the recent registry releases, this is a meaningful warning that current source maintenance may have paused or that releases may not reflect ongoing development.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. Build tooling is present, while the lack of automated security scanning leaves a transparency and maintenance gap for a network-facing plugin.

Security policycaution

No security policy was found in the repository. For a plugin that operates a WebSocket server and includes authentication and network-facing functionality, the absence of documented vulnerability reporting is a genuine transparency gap.

Version stabilitycaution

Version 0.4.0 is not a stable-major release, so the public API may still change before 1.0. It is not marked as a prerelease, which partly offsets the maturity concern.