andmarruda/ofx-php

Maintainerscaution

One registry maintainer is reasonable for an individual-owned package, but it leaves limited visible publishing capacity if that maintainer becomes unavailable.

Release historycaution

This is the only release, published about 3 years and 5 months ago, with no releases in the last 12 months. That limits evidence of continued maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months, consistent with a project that has not shown recent development activity.

Repo toolingcaution

Composer is used for builds, which is appropriate, but the repository reports no security-scanning tooling. For a small package this is a modest transparency and oversight gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a minor concern rather than evidence of an unsafe release.