decent-newsroom/signing-bundle

Dependency profilecaution

The bundle declares 16 runtime dependencies, including expected Symfony, cryptographic extension, and Nostr components; this is a meaningful dependency surface but not inherently problematic for this kind of integration bundle.

Release historycaution

This is the first release, published within the last day, with only one release and no demonstrated release cadence; maturity and continuity are therefore unproven.

Repo bus factorcaution

All observed commit activity comes from one contributor. The organization-owned repository provides some ability to hand off maintenance, but no second active contributor is shown.

Repo commit activitycaution

Only one commit and one active maintainer are observed over three months, so sustained maintenance capacity has not yet been demonstrated.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or PR activity; for a repository only hours old, this is inconclusive but provides no evidence of an established maintenance community.