fanfanfw/landbot-secure

Project backingcaution

The repository and registry are owned by the same individual account. This is consistent ownership, but it does not provide organizational backing to offset the limited observed activity.

Release historycaution

All three releases were published on the same day, with a median interval of about 1 hour 17 minutes, and the package is now about 174 days old. This looks like an initial release burst rather than sustained release activity.

Repo commit activitycaution

The repository has had zero commits and zero active maintainers in the last 3 months. Combined with the short initial release burst, this raises the risk that maintenance has stalled.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package that handles token and proxy flows, this is a meaningful but not severe transparency gap.

Security policycaution

No security policy was found, leaving contributors and users without a documented vulnerability-reporting path.