tanthammar/recurring

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, this leaves publishing capacity concentrated in one person.

Project backingcaution

The repository is owned by the same individual namespace as the package, confirming direct ownership but offering no organizational maintenance cushion.

Repo bus factorcaution

One contributor made all two recent commits, so maintenance depends on a single active contributor with no demonstrated handoff capacity.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.