danielgnh/footprint-statamic

Maintainerscaution

Only one registry account has publish access. That is consistent with the user-owned repository, but it leaves release publishing dependent on one person.

Project backingcaution

The registry namespace and repository are both owned by the same individual account, and the repository is not organization-backed. This aligns ownership but provides no broader maintenance capacity.

Release historycaution

This is the package's first and only release, published 0 days ago, so there is no release track record yet. That limits maturity evidence but is expected for a newly launched package.

Repo bus factorcaution

One contributor made all 8 commits in the last 3 months, concentrating maintenance knowledge and release capacity in a single person. The repository is user-owned, so no organizational handoff evidence compensates for that concentration.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That is a process gap for a package handling application and visitor analytics data, though it does not by itself indicate unsafe code.