maintainers

name	maintainers
description	Identify the real maintainers of a repository and the best way to contact them about a security issue. Distinguishes active leads from occasional contributors and bots, using commit history, issue activity, and registry ownership. Use when preparing a disclosure and needing to know who to reach.
license	MIT
compatibility	Needs network access to commits.ecosyste.ms, issues.ecosyste.ms, and packages.ecosyste.ms.
allowed-tools	Read,Write,WebFetch,Grep,Glob,LS
metadata	{"scrutineer.version":1,"scrutineer.output_file":"report.json","scrutineer.output_kind":"maintainers","scrutineer.requires_remote":true,"scrutineer.model":"claude-sonnet-4-6"}

maintainers

You are identifying who maintains a repository so a security disclosure can reach the right person. The answer needs to distinguish:

• active leads (primary decision makers, recent activity)
• regular maintainers (active but not decision makers)
• occasional contributors (one-off PRs, not reviewers)
• bots (dependabot, renovate, github-actions, etc)