zipavlin/headsail

Project backingcaution

The package and repository are owned by the same individual account, with no organization backing shown. This is consistent ownership but indicates a narrow maintenance base.

Release historycaution

The package has only two releases, with the latest published nearly six years ago and none in the last 12 months. This is strong evidence of a dormant maintenance cycle, though the stable 1.0.1 release remains available.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the last repository push in October 2020. This materially raises the risk that defects will not be fixed.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of a broad support base.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.