justintime50/pineapple

Maintainerscaution

Only one registry publisher is listed, which leaves a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is no provided evidence that this risk is compensated.

Project backingcaution

The registry namespace and repository are owned by the same individual, which supports identity continuity but provides no organizational backing or redundancy for maintenance.

Release historycaution

The package has only three releases and none in the last 12 months; the latest registry release was in July 2024. This is a meaningful maintenance concern despite the repository receiving a later push.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The later push date is some reassurance, but the current activity window still indicates limited ongoing development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.