devriyad/giosms

Maintainerscaution

The registry lists one maintainer, and the repository is owned by an individual rather than an organization. That is workable for a small package but leaves a thin apparent support base.

Release historycaution

Only two releases were published, both within about one hour, followed by no newer release for about seven months. That short history provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, despite the package being only about seven months old. This weakens confidence that defects or compatibility changes will be addressed promptly.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present, leaving a modest transparency and maintenance-process gap.

Security policycaution

The repository has no security policy, so there is no documented path for reporting vulnerabilities or describing how security issues are handled.