valga/fbns-react

Maintainerscaution

Only one registry account has publish access, and the project is backed by an individual-owned repository rather than an organization. This creates limited observable publishing redundancy.

Release historycaution

The package has existed since 2017 with 18 releases, but it has had no release in the last 12 months; the latest release was in April 2025. This indicates a mature history but currently inactive release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, matching the long pause since the latest release. This is a meaningful maintenance and abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest supply-chain hygiene gap for a package with 12 runtime dependencies.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This lowers transparency, although it does not by itself make the package unfit.