tigron/skeleton-migrate

Maintainerscaution

Only one registry account has publishing access, which is a limited publishing base. The organization-backed repository provides some compensation for that concentration.

Repo bus factorcaution

All two recent commits came from one contributor, creating a meaningful single-contributor risk. Organization ownership partly reduces handoff risk but does not remove the concentration.

Repo issue activitycaution

There is only one open issue and no recent issue or pull-request activity. This is a small transparency gap, but it is not strong evidence of abandonment alongside the recent release and commits.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe or abandoned.

Security policycaution

The repository has no security policy. This reduces vulnerability-reporting transparency, though it is not by itself evidence of poor maintenance.