boxybird/waffle

Dependency profilecaution

The package declares 24 runtime dependencies, creating meaningful upgrade and compatibility surface for consumers, though its Illuminate-based toolkit story makes a broad dependency set expected.

Project backingcaution

The repository is owned by an individual rather than an organization, so the small maintainer base offers less organizational continuity, though recent activity provides compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated maintenance hygiene.

Security policycaution

The repository has no security policy, which weakens disclosure transparency for a framework-oriented library, but this is a modest gap rather than evidence of abandonment.

Version stabilitycaution

Version 0.7.1 is not a prerelease, but the pre-1.0 major version indicates that compatibility guarantees may be less mature than for a stable-major package.