tjm/sy-site

Release historycaution

The package has 22 releases over about three and a half years, but only one release in the last 12 months. That is a thin recent cadence for a dependency, despite the latest release being relatively recent.

Repo bus factorcaution

One contributor made 100% of the recent commits. With a user-owned rather than organization-owned repository, this concentration creates a meaningful continuity risk.

Repo commit activitycaution

Only two commits were made in the last three months, by one active maintainer. Recent activity exists, but it is sparse and offers limited evidence of sustained maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That makes package-to-source ownership less clear than expected and warrants caution.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanning is a maintenance and transparency gap, though it is not severe by itself.