kurozumi/github-webhook-bundle

Project backingcaution

The repository is owned by an individual rather than an organization, so the project has limited visible institutional backing. This matters more alongside the lack of recent activity.

Release historycaution

The package has only three releases, all concentrated around October 2024, with no releases in the following 23 months. That long pause is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Together with the old last push and release history, this supports a slowing-maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap, though not evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy. Consumers have no documented process for reporting or coordinating security issues.