venusian/letterhead

Release historycaution

This is the package's first and only release, published today, so there is no release history to demonstrate sustained maintenance. Its very recent publication explains the lack of history but does not remove the uncertainty.

Repo commit activitycaution

The repository has no commits or active maintainers in the past three months. Because the repository was also created today, this is more a lack of maintenance evidence than proof of abandonment, but longevity remains unproven.

Repo toolingcaution

Composer is used as the build tool, which fits the package, but no security scanning tool is configured. That leaves a meaningful repository-hygiene gap for a package intended to be consumed as a dependency.

Security policycaution

No security policy is present in the linked repository, reducing transparency around vulnerability reporting and response. This is a moderate hygiene concern rather than evidence that the package is unsafe.