draw/sonata-integration-bundle

Project backingcaution

The repository is owned by an individual user rather than an organization. That makes the concentrated contributor activity more consequential because there is no demonstrated organizational maintenance handoff.

Repo bus factorcaution

One contributor made 8 of the 10 recent commits, leaving a concentrated maintenance base. A second contributor remains active, so this is a continuity concern rather than a severe abandonment signal.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher. This provides little external validation, but popularity is supporting evidence and the active release and commit history compensate for the small audience.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool is reported. Composer is appropriate for the package; the absent scanning is a modest transparency gap.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear. This lowers transparency but is not by itself evidence that the package is unsafe to use.