criq/fatty

Licensedanger

No declared license, license file, or repository license file was detected. This creates a material legal and transparency concern for a dependency.

Package scaffoldingcaution

The package includes a README, but it is only 8 characters long and contains just a heading; tests and a changelog are absent, which is normal for published artifacts but leaves little consumer guidance.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. Although a release was published recently, the lack of recent commit activity weakens evidence of continuing maintenance.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but this provides little independent evidence of community review or shared maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest supply-chain hygiene gap rather than evidence of abandonment.