rosgear/rg-be-recovery

Release historycaution

This is a new package, 56 days old, with only one release. That limits evidence of stability and long-term maintenance.

Repo bus factorcaution

All 21 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some handoff capacity but does not remove the concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For an account-recovery module, that is a notable transparency and oversight gap.

Security policycaution

The repository has no security policy. This is a caution for a module handling account recovery because it gives users no documented reporting path or security process.