civicrm/cv

Repo bus factorcaution

All 4 recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization backing helps provide a handoff path, but no second recent contributor is shown.

Repo commit activitycaution

The repository had 4 commits in the last 3 months, showing ongoing work, but the activity level is modest and should be read alongside the single-contributor concentration.

Repo toolingcaution

The project uses Composer and Box for builds, which supports a defined build process. No security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy. For a command-line tool that interacts with installations and can download or modify components, this weakens vulnerability-reporting transparency.