mnvx/lowrapper

Project backingcaution

The registry namespace and repository owner match, and the repository is owned by the same individual rather than an organization. The matching ownership supports provenance, while the individual backing offers limited redundancy.

Release historycaution

The package has 12 releases since January 2017, but no releases in the last 12 months and the latest release was nearly two years ago. This is a meaningful maintenance concern despite its established history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, following a last push nearly two years ago. This directly raises the risk that defects or compatibility issues will remain unattended.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with five open issues and one open pull request. This suggests limited current project activity, though the small backlog is not severe by itself.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.