yaleksandr89/archive-guard

Project backingcaution

The package and repository are owned by the same individual account, so the one-person maintenance concentration is not offset by organization backing.

Release historycaution

The package is only 1 day old with three releases, spaced about 22 hours apart, so maintenance and compatibility over time are not yet demonstrated.

Repo bus factorcaution

All recorded recent commits came from one contributor, leaving no demonstrated contributor redundancy for this user-owned project.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. The recent release activity helps explain the timing, but sustained maintenance is not yet established.

Repo toolingcaution

Composer build tooling is present and a security policy exists, but no security-scanning tool was detected; this is a modest transparency gap for a package handling untrusted archives.