sura/sura

Maintainerscaution

One registry publishing account is listed, which creates a thin publishing base. The organization-owned repository provides some backing, so this is a limited concern rather than a severe risk.

Release historycaution

The latest registry release was in October 2023, with no releases in the last 12 months and only three releases overall. This is meaningful maintenance concern for a dependency, though the stable 1.0.0 version reduces churn risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed in March 2024, but the current absence of activity still raises abandonment risk.

Repo popularitycaution

The repository has one star, one fork, and no watchers, giving little community evidence to supplement maintainer support. Low popularity is supporting evidence only and does not by itself make the package unfit.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although Dependabot provides some compensating security maintenance evidence.