qalainau/filament-inbox

Project backingcaution

The registry and repository are owned by the same individual account, supporting package identity, but there is no organization backing shown to offset the thin maintenance base.

Release historycaution

This is a young package, about five months old, with two releases and a median interval of about 41 days. That provides some release evidence but not enough history to establish long-term maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a package only about five months old, this is a meaningful maintenance concern, although the recent release and complete project structure provide some compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.

Security policycaution

The repository has no security policy. For a messaging plugin handling user and tenant data, the absence reduces transparency about vulnerability reporting and response.