ipf/news_bunny

Release historycaution

The package is only 2 days old, despite 10 releases arriving roughly every 39 minutes on median. This shows active initial publishing but provides little evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all 3 recent commits, concentrating current maintenance responsibility in a single person. With no organizational ownership shown, this raises continuity risk.

Repo commit activitycaution

Only 3 commits were recorded in the last 3 months, all during this newly published period, so there is not yet enough history to demonstrate sustained maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. That is a modest process gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap for a backend extension.