componenta/middleware-factory

Dependency profilecaution

Ten runtime dependencies create a meaningful maintenance surface, but the dependencies fit the package's middleware and Componenta integration role rather than appearing gratuitous.

Repo bus factorcaution

One contributor made all 10 commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving a genuine concentration risk.

Repo commit activitycaution

Ten commits were made in the last three months, showing active work, but all activity came from one maintainer, limiting demonstrated maintenance depth.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a transparency and process gap, though it is not evidence of maliciousness by itself.

Security policycaution

The repository has no security policy, leaving contributors without a documented vulnerability-reporting process.