codyas/audit-bundle

Repo bus factorcaution

All 2 recent commits came from one contributor, giving the project a concentrated maintenance base. The organization-owned repository provides some ability to hand off maintenance, partially compensating for that concentration.

Repo commit activitycaution

The repository recorded 2 commits in the last 3 months, showing recent work but only limited maintenance activity.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest process gap for a package that handles application data.

Security policycaution

The repository has no security policy, so there is no documented route for reporting vulnerabilities or communicating security handling. This is a transparency and maintenance gap, not evidence of malicious behavior.

Version stabilitycaution

v0.0.8 is not marked as a prerelease, but the 0.x version indicates the public API may still change before a stable major release. This is a moderate compatibility caveat rather than an abandonment concern.