datlechin/flarum-pronouns

Project backingcaution

The registry namespace and repository owner match, so the source ownership is coherent. The owner is an individual rather than an organization, which provides less visible maintainer redundancy.

Release historycaution

This is the package's only release, published nearly 4 years 9 months ago, with no releases in the last 12 months. That limits evidence of ongoing compatibility maintenance, although recent repository activity partly offsets the concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which weakens evidence of current maintenance. The recent push shown by repository_archived and three merged pull requests in the last month provide some compensating activity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are reported. The missing scanning is a hygiene limitation, not evidence that the package is unsafe or abandoned.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package intended for application deployments.