insite/composer-npm-audit

Repo bus factorcaution

All recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.

Repo commit activitycaution

There was one commit in the last three months, showing some current activity but only a thin maintenance signal.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is not decisive, but this provides little supporting evidence of broad review or adoption.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving less automated oversight for a package focused on vulnerability auditing.

Security policycaution

The repository has no security policy, which reduces clarity about how users should report vulnerabilities and how security issues are handled.