breadthe/php-simple-calendar

Project backingcaution

The registry and repository are owned by the same individual account, so the source relationship is clear, though there is no organizational backing to offset contributor concentration.

Release historycaution

The package has only 3 releases across about 6 years, with a median interval of roughly 3 years and 1 release in the last 12 months; the recent release provides some evidence of ongoing care, but the long-term cadence is sparse.

Repo bus factorcaution

All 4 commits in the last 3 months came from one contributor, leaving maintenance dependent on a single person.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented reporting or response process; this is a transparency gap rather than evidence of a security flaw.