guave/sentry-bundle

Maintainerscaution

Only one registry account has publishing access, which is a limited publishing base. The organization-owned repository provides some backing, so this is a modest concern rather than a severe risk.

Release historycaution

The package has three releases over about three years, but none in the last two years. This indicates a slowing maintenance cadence and raises abandonment risk, though the package is not entirely inactive historically.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. Combined with no releases in the last two years, this is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Composer, but no security-scanning tool was detected. For a small PHP bundle this is a hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy. That reduces transparency about vulnerability reporting and response expectations.