team-mate-pro/contracts

Repo commit activitydanger

Despite the recent push and frequent registry releases, the repository records 0 commits and 0 active maintainers in the last 3 months. That mismatch weakens confidence in ongoing source maintenance.

Maintainerscaution

Only one registry account has publishing access, and the repository owner is a user account rather than an organization. This creates a thin maintainer base and a higher continuity risk.

Package scaffoldingcaution

The artifact includes a README, tests, and a changelog, and the repository also has tests, which supports consumer understanding and project quality. The README labels the package proprietary while the manifest declares MIT, so licensing expectations are not fully clear.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected. The missing scanning is a maintenance and transparency gap, though it is not by itself evidence of unsafe code.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.