hogus/api-signature

Project backingcaution

The repository is owned by a user account rather than an organization, so the single registry maintainer does not benefit from visible organizational backing.

Release historycaution

The package has only one release, published about 2 years and 4 months ago, with no releases in the last 12 months. This provides little evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months. Combined with the old last push, this weakens evidence that maintenance capacity is currently available.

Repo popularitycaution

The repository has no stars or forks and one watcher, providing little supporting evidence of broad review or community adoption. Popularity is supporting evidence rather than a verdict.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap for a package handling request authentication.