danyseif/calcify

Maintainerscaution

One registry maintainer creates a thin support base, and the linked repository is user-owned rather than organization-backed. This increases continuity risk if that maintainer becomes unavailable.

Release historycaution

This is the only release, published about two years ago, with no releases in the last 12 months. That is meaningful evidence of limited ongoing maintenance for a library.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity showing continued care.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The tooling supports normal package construction while offering limited security-process evidence.

Security policycaution

The repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This is a transparency gap, though it is not evidence that the package is unsafe.