openpsa/org-openpsa-contacts

Release historycaution

The package has only 4 releases over about 4 years, with a median interval of about 19 months and one release in the last 12 months. A recent release helps, but the long cadence limits confidence in sustained maintenance.

Repo bus factorcaution

All 7 recent commits came from one contributor, creating a narrow maintenance base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

No repository security policy was found, leaving the project's vulnerability-reporting process undocumented. This is a transparency and maintenance-process gap, not evidence of malicious behavior.