ianhobbs/song-block

Maintainerscaution

Registry publishing access is held by one person. The repository shows two active contributors, which provides some compensation but still leaves a relatively small maintenance base.

Repo bus factorcaution

Two contributors were active in the last 3 months, but the leading contributor made 80% of commits. The second contributor reduces the single-person risk, while the concentration still warrants caution.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less clear, though it is not evidence of a vulnerability.