hurah/canvas-api

Maintainerscaution

Only one registry account has publish access. The repository is user-owned, so the narrow publishing base provides limited redundancy even though recent releases show activity.

Repo bus factorcaution

One contributor made all commits during the last three months, giving the project a complete recent commit concentration. With user ownership rather than organization backing, handoff capacity is limited.

Repo commit activitycaution

The repository recorded only one commit in the last three months. Recent registry releases partly offset this, but the source maintenance pace is thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a moderate transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting and response expectations undocumented, which modestly lowers project transparency.