joinapi/data-order

Package scaffoldingcaution

The artifact includes a README and this exact version has a GitHub release, both of which improve traceability. The README is only 12 characters and there are no tests or changelog, though tests and changelogs are repository concerns rather than expected package contents.

Project backingcaution

The registry namespace and repository owner are both joinapi, and the repository owner is an individual account rather than an organization. This offers consistent ownership but limited visible backing capacity.

Release historycaution

This is the package's only release, published 642 days ago, with no releases in the last 12 months. That provides little evidence of active maintenance, although the repository remains available and unarchived.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with a single historical release, this is meaningful evidence of a dormant project.

Repo toolingcaution

The repository uses Composer, showing standard build tooling, but no security scanning tool was detected. That is a modest transparency and hygiene gap rather than a severe dependency risk.