informaticadoslago/censo-vias

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the single-contributor maintenance risk is not offset by visible organizational backing.

Release historycaution

The package is very young at 69 days old and has only two releases, both published about seven minutes apart, so there is little evidence of sustained release maintenance.

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance dependent on a single person with no demonstrated handoff capacity.

Repo commit activitycaution

Only two commits were recorded in the last three months, all around the latest release, which gives limited evidence of ongoing maintenance beyond initial publication.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is present; this is a modest transparency gap rather than a severe risk for this small package.