componenta/http-psr-slim

Package scaffoldingcaution

A README documents the package boundary and registered services, but there are no tests or changelog in either the artifact or repository. For this small integration package the missing tests and release notes are genuine transparency gaps, though the focused README provides some compensating documentation.

Repo bus factorcaution

One contributor made all four commits in the last three months, creating a real concentration risk. The organization-owned repository provides some handoff capacity, so this is a caution rather than a severe abandonment signal.

Repo commit activitycaution

The repository recorded four commits in the last three months, showing recent activity, but all activity came from one maintainer.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured. The missing scanning is a modest process gap for a small package, not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency, although the package is a small integration component.