a9f/typo3-fractor

Maintainerscaution

Only one registry account has publish access, which is a modest publishing continuity concern. However, repository activity shows three active contributors, providing some compensation.

Repo bus factorcaution

The top contributor made two-thirds of recent commits, creating some concentration risk, but two other contributors remained active and the repository is user-owned rather than organization-owned.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and assurance gap, though it is not severe given the repository's active development and test suite.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a minor transparency gap for a maintained package.