donatj/mddoc

Dependency profilecaution

Twelve runtime dependencies, including PHP extensions and several parser or utility packages, create a meaningful dependency surface. The profile is reasonable for a PHP documentation generator but adds compatibility maintenance.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not visibly compensated by organizational backing.

Repo bus factorcaution

All 80 counted contributor commits came from one contributor, giving the project a complete single-person commit concentration. The active pace helps, but this remains a material continuity risk if that contributor stops.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is a process gap rather than evidence of unsafe code.

Version stabilitycaution

v0.13.0 is not a prerelease, but the package remains below a stable major version. That signals some API-change risk despite the absence of recent prereleases.