davindisko/spektak-plugin

Maintainerscaution

Only one registry account has publish access, which limits publishing resilience. The linked project is user-owned rather than organization-backed, so there is no provided evidence of a broader maintainer base to compensate.

Release historycaution

The package has six releases since August 2023, but none in the last 12 months; the latest release was nearly two years ago. This is meaningful evidence of slowing maintenance for a plugin dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the old latest release, this raises the risk that fixes and compatibility updates may be delayed.

Repo toolingcaution

The repository uses Composer build tooling, which fits this Packagist package. No security scanning tools are configured, a modest hygiene gap that is partly offset by the small and transparent package structure.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less severe than evidence of active abandonment.