deboorn/expbackoffworker

Maintainerscaution

Only one registry maintainer is listed, so publishing continuity depends heavily on a single person. The matching user-owned repository provides ownership context but does not offset the limited maintainer base.

Release historycaution

The package has six releases over roughly 11 years, with no release in nearly four years and a median interval of about 14 months. This indicates substantially slowed maintenance for a dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the repository is not archived, the lack of observed development activity raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The README's contact guidance provides some compensation but is less formal.