sharkydog/shelly-connector

Maintainerscaution

Only one registry account has publishing access. The matching repository is user-owned rather than organization-backed, so there is limited visible publishing continuity if that maintainer becomes unavailable.

Release historycaution

The package has 10 releases over about 23 months, but only one release in the last 12 months and the latest was about 6 months ago, indicating a substantially slower cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with the recent slowdown and raising abandonment risk for a small project.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. This is a transparency and maintenance gap, though not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a network-facing WebSocket package.