tienvx/pact-provider-bundle

Project backingcaution

The package and repository are owned by the same individual account, providing clear ownership but no organizational backing to offset the thin maintenance base.

Release historycaution

The package has five releases, but none in the last 12 months; the latest registry release was over two years ago. This indicates a potentially abandoned project despite its stable version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of releases in the last year, this raises maintenance and abandonment concerns.

Repo popularitycaution

The repository has one star, one fork, and one watcher. Low popularity is not disqualifying for a small package, but it provides little evidence of a broad user or contributor base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.