joy/voyager-generator

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned, so this is a modest resilience concern rather than evidence of a poorly backed organization project.

Release historycaution

The package has 28 releases since July 2021, but none in the last two years; the latest release was in February 2024. That long release gap is a meaningful maintenance concern.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with no registry releases in more than two years, this points to limited recent maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a minor transparency and assurance gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. The README provides a security contact, which partly compensates, but the reporting and response process is still less explicit than a dedicated policy.