actra/yuf-skeleton

Release historycaution

Three releases arrived within about 17 hours, but the package is only 0 days old, so there is not yet evidence of sustained maintenance over time. The rapid initial releases are some positive activity, but they do not establish durability.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, leaving no established maintenance record. Because the repository was pushed on the assessment date and the package is newly published, this is a caution rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap, not a standalone dependency blocker.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and handling. This matters for a web application starter, although it is not severe on its own.