mediawiki/smw-file-protect

Maintainerscaution

One registry publishing account is listed. This is not inherently concerning because the linked repository is organization-owned, but it provides limited independent evidence of publishing resilience.

Release historycaution

The package has only two releases and is less than one day old, so its release history provides little evidence of maturity or sustained maintenance.

Repo commit activitycaution

No commits and no active maintainers were observed during the last three months. Because the package is less than one day old, this is primarily a lack of evidence rather than proof of abandonment, but it still lowers confidence.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although a subpackage can legitimately use a differently named repository, this leaves the package-to-source relationship insufficiently demonstrated.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. The missing scanner is a modest transparency and maintenance gap, not a severe risk by itself.