ras/flash-alert-bundle

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.

Release historycaution

The package has existed for about 12 years with six releases and one release in the last 12 months, showing ongoing but sparse release activity.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, despite a recent release and push; this weakens evidence of active maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.