magefan/module-blog

Project backingcaution

The registry namespace and repository owner are both magefan, and the repository is owned by a user account rather than an organization. This gives consistent ownership evidence but limited organizational redundancy.

Release historycaution

The package has 120 releases over more than 10 years, but no releases in the last 12 months; the long history helps, while the current pause lowers confidence in ongoing maintenance.

Repo bus factorcaution

One contributor made all two recent commits, concentrating current maintenance in a single person. The matching repository ownership provides some continuity but does not remove the succession risk.

Repo commit activitycaution

The repository recorded only two commits in the last three months, indicating limited recent activity; the recent push shows the project is not wholly dormant.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence of an unsafe release.