qixinyun/pingxiang-wugongshan-share-config

Maintainerscaution

Only one registry maintainer is listed, limiting visible publishing redundancy. The linked repository is owned by the same user, which provides some continuity but not a broader maintainer base.

Release historycaution

This package has only one release, published about 6 years ago, with no releases in the last 12 months. That substantially weakens evidence of ongoing maintenance, although a small configuration package may change infrequently.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, consistent with a project whose maintenance has stopped. The repository's last push in 2023 provides some evidence it was maintained previously.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities. This is a modest transparency weakness for a dependency.