type-lang/types

Release historycaution

The package is only 66 days old and has had two releases, with 62 days between releases. This is limited history for judging long-term maintenance, though the latest release is recent.

Repo bus factorcaution

One contributor made all 10 commits in the last three months, creating a significant single-maintainer continuity risk. Organization backing provides some potential handoff capacity but does not remove the observed concentration.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling was detected. This is a transparency and maintenance gap, although the package's minimal dependency profile limits its practical exposure.

Security policycaution

The repository has no security policy. This leaves vulnerability-reporting expectations unclear, although it is a modest governance gap rather than evidence of abandonment.

Token permissionscaution

The only workflow lacks top-level token permissions, so its required access is not explicitly constrained. No top-level write permissions were observed, limiting the severity of this configuration gap.