pippa/notification-sdk-curl

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Release historycaution

The package is only 137 days old with eight releases, and releases are tightly clustered around the initial publication, so there is limited evidence of sustained maintenance.

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance dependent on a single individual.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is limited activity for a package whose release history is also very young.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is configured, leaving a modest transparency and maintenance gap.