nih/app-skeleton

Project backingcaution

The package is linked to the matching nih-soft repository, but the repository owner is an individual account rather than an organization. This gives some ownership context without strong organizational backing.

Release historycaution

The package has only three releases, all published within roughly one day, followed by about 5 months without another release. That short launch burst provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository has recorded zero commits and zero active maintainers in the last 3 months. Combined with the short release history, this is meaningful evidence that development has gone quiet.

Repo popularitycaution

The repository has 3 stars, no forks, and no watchers, indicating a very small user and contributor footprint. Popularity is only supporting evidence, but this offers little external evidence of maturity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe dependency risk on its own.