sbwerewolf/fias-gar-data-import-tool

Maintainerscaution

Only one registry publishing maintainer is listed, so continuity depends on a single individual. The linked repository and package identity match, providing some transparency but not redundancy.

Release historycaution

The latest release was over a year ago, and there were no releases in the last 12 months. The package has only five releases overall, limiting evidence of an active maintenance cycle.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, despite the source repository being available and the latest release having been published over a year earlier.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it does not by itself make the release unfit.