civicrm/civix

Repo bus factorcaution

One contributor made all 2 commits in the last 3 months, giving that contributor a 100% share. The concentrated activity leaves limited visible redundancy if they stop maintaining the project.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, despite two merged pull requests in the last month. That is some ongoing work, but the recent coding pace is thin.

Repo issue activitycaution

There were no new issues or pull requests in the last month, although 2 pull requests were merged and 7 remain open. This is a modest maintenance concern rather than evidence of abandonment.

Repo toolingcaution

The project uses Composer and Box for builds, which supports reproducible packaging, but no security-scanning tool was detected. That is a transparency and hygiene gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. For a command-line tool distributed as a PHAR, this makes vulnerability reporting less clear, though the package otherwise has a public repository and release documentation.