devinci-it/envngine

Release historycaution

This is a young package, about 145 days old, with only one release and no established release cadence. That limits evidence of sustained maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no supporting evidence of external adoption or review. Popularity is only supporting evidence, so this modestly lowers confidence rather than determining the verdict.

Repo toolingcaution

Composer is used for builds, but the repository reports no security scanning tools. That leaves a meaningful verification gap for a package handling environment configuration.

Security policycaution

The linked repository has no security policy, so there is no stated process for reporting or handling vulnerabilities. This is a transparency and maintenance concern, though not evidence of unsafe code by itself.