spkm/isams-api

Maintainerscaution

Only one registry publishing maintainer is listed, which creates some continuity risk, although the linked repository and release history show active ownership.

Project backingcaution

The package and repository are owned by the same individual account, so ownership is consistent but lacks organizational redundancy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed after the latest release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations less explicit despite the README providing a security contact.