basic-hub/es-core

Dependency profilecaution

The package declares 25 runtime dependencies and several PHP extensions, which is broad for a utility library and increases dependency maintenance surface. Its README describes a wide EasySwoole integration toolkit, partly explaining the size, so this is only a modest concern.

Licensecaution

The manifest declares MIT and license files are present, but an artifact license file was detected as Apache-2.0, creating a material licensing mismatch. The repository also contains a license file, so this is a caution requiring clarification rather than an absence of licensing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite the latest push occurring today and the registry showing 410 releases. The discrepancy weakens confidence in sustained source maintenance and warrants caution.

Repo popularitycaution

The repository has five stars and two forks, indicating a small user base. Popularity is supporting evidence only, and the low count does not outweigh the package's release, documentation, and ownership evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a library with encryption, cloud integrations, and HTTP functionality, the missing scanning layer is a transparency and maintenance weakness.