wwwision/renderlets-provider

Maintainerscaution

Only one account has registry publish access. Because the repository is user-owned rather than organization-owned, this represents a thin publishing and continuity base.

Release historycaution

The package has six releases since March 2023, but none in the twelve months before assessment; the latest release was in May 2024. This indicates materially reduced maintenance activity.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before assessment. This is strong evidence of currently inactive maintenance, despite the repository not being archived.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. For a package exposing HTTP renderlet functionality, the absence reduces guidance for reporting and handling vulnerabilities.