metasync-site/sanctum-tokens

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no provided organizational backing to compensate for the thin maintenance evidence.

Release historycaution

The package has only 3 releases and none in the last 12 months, despite being about 18 months old; the initial release cadence does not offset the long recent gap.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap and indicating that maintenance may have slowed substantially.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of immediate unfitness.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.