hypejunction/user_settings

Maintainerscaution

Only one registry account has publish access. The package has a long release history, but a single publisher leaves limited visible redundancy if that maintainer becomes unavailable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which indicates a recent pause in source activity. The recent registry releases and July push partly offset this, but not completely.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although the owner and package namespace align, the missing direct reference creates uncertainty about repository ownership.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

No repository security policy was found. For a small plugin this is a limited documentation gap, but it leaves vulnerability-reporting expectations unclear.