enhavo/taxonomy-bundle

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This weakens evidence of ongoing development, although the recent registry release and longer release history partly compensate.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although the source URL is under the same organization, the collected evidence leaves some uncertainty about package ownership.

Repo popularitycaution

The repository has no stars or forks and only two watchers. Popularity is supporting evidence rather than a verdict, but this small public footprint provides little independent validation.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanning automation is a modest supply-chain hygiene gap, not evidence of abandonment by itself.

Security policycaution

The repository has no published security policy. This reduces transparency about vulnerability reporting and response, with no provided compensating security process.