arxy/graphql-bundle

Licensecaution

The manifest declares a proprietary license, so the release is licensed but may impose restrictions that matter to downstream projects. No license file was detected to clarify those terms.

Release historycaution

The package has 9 releases over about 2 years and 9 months, with one release in the last 12 months. The recent release is encouraging, but the current cadence is light.

Repo bus factorcaution

One contributor made all commits in the last 3 months, leaving the project dependent on a single active maintainer. The recent activity is a partial positive but does not remove the concentration risk.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, with one active maintainer. That demonstrates some ongoing work but indicates limited maintenance capacity.

Repo toolingcaution

Composer build tooling is used, supporting a standard PHP build process, but no security scanning tool was detected. This is a modest transparency and maintenance gap.