gioco-plus/jili-contract

Maintainerscaution

Only one registry publishing account is listed, which is a thin publishing base. The organization-backed repository provides some compensation, but the registry access list does not show active maintenance capacity.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, and the repository reports none either. For a three-file contract package this is partly understandable, but the missing README still reduces consumer context.

Release historycaution

The package has only 3 releases since August 2022, with no releases in the last 12 months and the latest release in August 2024. This indicates a slow, currently inactive release cadence for a dependency.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap and indicating no recent maintenance activity.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are reported. The missing scanning is a modest transparency gap for a dependency, not evidence of unsafe code by itself.