draw/core

Project backingcaution

The package is backed by an individual repository owner rather than an organization, so the small and concentrated contributor base carries more maintenance risk.

Repo bus factorcaution

Two contributors were active recently, although one made about 78% of commits; the second contributor provides some resilience but the maintainer base remains concentrated.

Repo popularitycaution

The repository has zero stars and forks and one watcher, so there is little external visibility or community validation. This is supporting evidence only and is outweighed by recent releases and commits.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a transparency gap, though it is not evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a genuine transparency gap for a reusable library.