qixinyun/xingxian-portal-config

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This offers direct ownership context without demonstrating a broader maintenance team.

Release historycaution

The package has only one release, published about 4 years and 8 months ago, with no releases in the last 12 months. That leaves limited evidence of ongoing maintenance, though a narrowly scoped configuration package may change infrequently.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. Combined with the single-release history, this is meaningful evidence that active support may have stopped.

Repo toolingcaution

Composer is identified as the build tool, providing basic project structure, but no security scanning tools are configured. For a small configuration package this is a modest hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. That limits disclosure transparency, although the package appears to be a small configuration artifact rather than a security-sensitive library.