yoanbernabeu/music-gpt-bundle

Maintainerscaution

Only one registry maintainer is listed, which creates a thin publishing and support base. The linked repository is owned by the same individual, so there is no visible broader maintainer capacity to offset that risk.

Release historycaution

This is a young package with one release, published 10 months ago, and no demonstrated release cadence yet. That limits evidence of sustained maintenance but is not abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months; its last push was about 10 months ago. For a package this new, the inactivity creates a meaningful maintenance concern.

Repo toolingcaution

The project uses Composer but reports no security-scanning tooling. Build tooling is present, while the missing scanning layer modestly reduces supply-chain and vulnerability visibility.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of a security incident.