arielespinoza07/tenancy-core

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-owned, so there is no organizational backing to offset the narrow publishing base.

Release historycaution

The package is only 101 days old with four releases, but releases occurred regularly over that period with a median interval of about 2.6 days. The short history leaves long-term maintenance unproven.

Repo bus factorcaution

One contributor made all six commits in the last three months, leaving maintenance highly concentrated with no organizational handoff signal.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving security-oriented project checks less visible.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout, script injection, or audit findings. However, all three action references are unpinned, so their fetched code is not fixed to reviewed revisions.