diviky/code-analysis

Dependency profilecaution

The package declares 25 runtime dependencies for a GrumPHP configuration package, creating a broad dependency surface and more upgrade and compatibility burden than a minimal configuration package.

Repo bus factorcaution

One contributor made all 2 commits in the last 3 months. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a security-maintenance gap for a package that configures many development checks.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing transparency for reporting and handling vulnerabilities.