rosgear/rg-be-workspace

Release historycaution

The package is 60 days old and has only one release, so there is little evidence yet of sustained release maintenance. Its recent publication is not abandonment, but the history remains limited.

Repo bus factorcaution

One contributor made all two recent commits, concentrating current maintenance responsibility in a single person. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing some activity but only a thin maintenance record for a package this new.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is reported. The missing scanner is a modest security-process gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This lowers transparency but is not severe on its own.