swindon/code-generator

Project backingcaution

The package and repository are owned by the same individual account, providing consistent ownership context but no organizational maintenance cushion.

Release historycaution

The package has only two releases, both in February 2022, with no release in over four years. This is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, consistent with the long period since the last release. This weakens evidence of ongoing maintenance but is not by itself an abandonment verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For this small utility that is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy. This limits the documented process for reporting vulnerabilities, although the package is small and has a narrow dependency profile.