brannow/graphql-php

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has direct ownership but lacks organization-level maintenance redundancy.

Release historycaution

The package is about 693 days old with 14 releases, but only 2 releases in the last 12 months. Recent repository activity provides some compensation, though the slower release cadence warrants caution.

Repo bus factorcaution

Two contributors made 23 commits in the last 3 months, but one contributor made 21 of them, or about 91%. A second active contributor helps, yet ownership remains concentrated.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of visible adoption provides little independent confidence to offset the concentrated maintainer base.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. That is a modest security-process gap, not evidence of unsafe code by itself.