ngsoft/ds

Maintainerscaution

A single registry publisher account is consistent with the repository being user-owned, but it leaves little visible publishing redundancy.

Package scaffoldingcaution

The package contains no README, tests, or changelog, while its GitHub release status confirms a release exists. Missing tests and changelog are normal for published artifacts, but the absent README is a real usability and transparency gap for a library.

Release historycaution

There has been only one release, published about 10 months ago, so the project has little demonstrated release history or maintenance track record.

Repo commit activitycaution

The repository has recorded no commits and no active maintainers in the last 3 months, and its last push was at the initial release. This leaves ongoing maintenance unproven for a package with only one release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest repository-hygiene gap rather than evidence that the package is unsafe.