souplette/fusbup

Maintainerscaution

Only one registry account has publish access. That is a resilience concern, but the repository is owned by an organization, which provides some backing beyond the registry access list.

Release historycaution

The package has 42 releases over about 3 years, but only 1 release in the last 12 months despite a historical median interval of about 11 days. This indicates a meaningful slowdown, though recent repository activity provides some compensation.

Repo bus factorcaution

All 8 recent commits came from one contributor, creating a high single-person dependency. Organization ownership partly compensates because maintenance can potentially be handed off.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less clear, although it does not by itself indicate abandonment.