webservco/application-runner

Maintainerscaution

Only one account has registry publish access, which reduces publishing redundancy. The organization-owned repository provides some backing, so this is a resilience concern rather than a severe risk.

Release historycaution

The package has had 5 releases since July 2023, but none in the last 12 months; the latest release was in February 2025. This indicates a meaningful maintenance slowdown for a library dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. The recent release provides some evidence of prior maintenance, but current activity is absent.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools were detected. The standard build tooling is positive, while the missing scanning coverage is a modest hygiene gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This lowers transparency but does not by itself show that the package is unsafe.