tcgunel/omniship-navlungo

Project backingcaution

The registry namespace and repository owner match, and the repository is owned by an individual. This is consistent ownership context, though it provides less organizational maintenance capacity than a backed project.

Release historycaution

The package is brand new, with two releases on the same day and no established release cadence. This limits evidence of long-term maintenance, though the short history is expected for a newly published package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe to depend on.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters for a package that integrates with shipping APIs, although it is not an abandonment signal by itself.

Version stabilitycaution

Version v0.0.2 is pre-1.0, so its API and behavior may still change. It is not marked as a prerelease, which provides some stability within the current release.