rayhan-bapari/notyfyre

Dependency profilecaution

The package declares three runtime dependencies, including the generic-looking `vendor/package`; this adds dependency clarity and supply-chain uncertainty that should be checked before adoption.

Maintainerscaution

One person has registry publishing access. This is not inherently unhealthy for a small personal package, but it leaves little visible publishing redundancy when recent repository activity is also absent.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, indicating recently quiet maintenance for a package whose latest release is already several months old.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful transparency and maintenance gap, though it does not by itself show a security problem.