divineomega/password-suggester

Registry deprecationcaution

Packagist marks the entire package as abandoned, even though the assessed v4.0.0 release is recent and points to the same replacement name. This is a meaningful maintenance warning, not an automatic verdict by itself.

Repo bus factorcaution

All recent commits come from one contributor, giving the project a bus factor of one. No organization backing is shown to compensate for that concentration.

Repo commit activitycaution

Only one commit and one active maintainer were observed in the last 3 months. The recent push is encouraging, but the very thin activity leaves limited evidence of sustained maintenance.

Repo toolingcaution

The repository uses Composer but has no detected security-scanning tooling. For a password-generation library, that is a modest security-process gap.

Security policycaution

No security policy was found in the repository. That weakens vulnerability-reporting transparency for a package handling password generation.