justinholtweb/craft-carrier-ups

Project backingcaution

The package and repository are owned by the same individual account, providing clear ownership but no organization backing or broader institutional support.

Release historycaution

This is the package's first release, published 0 days ago, so there is no release history from which to judge sustained maintenance. Its freshness is not abandonment evidence by itself, but it limits maturity evidence.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months. Because the release is only 0 days old, this is not evidence of abandonment, but it leaves ongoing maintenance unproven.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. That is a modest transparency and security-practice gap for a package handling shipping integrations.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities or explaining security handling.