openpsa/fi-protie-navigation

Release historycaution

The package has existed for about 5 years 8 months but has only five releases, with a median interval of about 17 months and one release in the last 12 months. The recent v9.11.0 release is positive, but the long intervals indicate a slower maintenance cadence.

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance capacity is concentrated. The organization-owned repository provides some ability to hand maintenance off, partly offsetting that risk.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing recent activity, but the volume is modest for a package with a long release interval.

Repo toolingcaution

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a documentation gap, not evidence that the package is unsafe.