enhavo/api-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a release was pushed recently, the lack of observed development activity is a meaningful maintenance concern.

Repo package mentioncaution

The repository name does not exactly match the package name and its README does not mention the package, which weakens package-to-source traceability. The package contents and subtree-split README partly explain this mismatch, so it is a limited caution rather than a severe concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and hygiene gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy. That reduces transparency around vulnerability reporting and response expectations, though it does not by itself indicate abandonment.

Version stabilitycaution

This release is not marked prerelease, although the package remains below major version 1. That suggests usable release discipline with some API-change risk typical of a pre-1.0 package.