dub/dub-php

Repo bus factorcaution

All eight recent commits came from one contributor, speakeasybot. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

There were eight commits in the last three months, but only one active maintainer produced them. The release cadence and organization backing partly compensate, while the concentration still creates continuity risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The absence of scanning is a maintenance and transparency gap, though it is not independently severe.

Security policycaution

The repository has no documented security policy, leaving vulnerability-reporting and response expectations unclear.

Version stabilitycaution

Version 0.16.0 is not a stable major release, so breaking changes remain possible, although it is not a prerelease and recent releases show no prerelease usage.