endroid/pokemon

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-person maintainer base provides limited continuity.

Release historycaution

The package has eight releases over roughly three years and one release in the last 12 months; this shows ongoing publication but a relatively slow recent cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed with the latest release, the recent inactivity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.