wildtuna/boxberry-sdk

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor activity and bus factor are not compensated by visible organizational backing.

Release historycaution

The package has existed since 2019 with 29 releases, but only one release in the past 12 months; the recent release is reassuring while the slower cadence warrants caution.

Repo bus factorcaution

All recent commit activity comes from one contributor, leaving no demonstrated contributor redundancy and increasing abandonment risk if that person becomes unavailable.

Repo commit activitycaution

Only one commit was recorded in the past three months, which shows some current activity but a limited maintenance pace for a package developers may depend on.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a process gap, though it is not enough on its own to make the release unfit.