coleus/users

Package scaffoldingcaution

The published artifact has no README, tests, or changelog, and the linked repository also reports none. The missing consumer documentation and tests reduce transparency for a library, while absent package tests and changelogs are not by themselves unusual packaging gaps.

Repo bus factorcaution

One contributor made all one recent commit, creating a concentrated maintenance base. The repository is organization-owned, which provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin recent maintenance evidence. The active release history partly compensates, but source-level activity remains limited.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool is detected. The build setup is appropriate, while the missing scanning coverage is a modest transparency gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is a hygiene concern rather than evidence that the package is unsafe.