vinchan/message-notify

Maintainerscaution

Only one registry maintainer account is listed. Because the repository is user-owned, this is not merely an organizational publishing artifact and leaves limited visible publishing continuity.

Release historycaution

The package is mature at about four years old with eight releases, but only one release appeared in the last 12 months and the median interval is about 193 days. The recent latest release partly offsets the slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push show recent publication activity, but they do not establish sustained ongoing development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is a documentation gap rather than a direct maintenance failure.