danielgnh/footprint

Project backingcaution

The registry and repository are owned by the same individual account, with no organization backing shown. This is consistent ownership but provides no organizational maintenance redundancy.

Release historycaution

This is the package's first release, published recently, so there is no longer release record to demonstrate sustained maintenance. The linked repository does show recent development, which partly offsets the lack of history.

Repo bus factorcaution

All 18 recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.

Repo toolingcaution

Composer build tooling is used, but no security scanning tools were detected. This is a transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, so users are given no documented channel or process for reporting and handling vulnerabilities.