evasio/ecs

Repo bus factorcaution

One contributor made all commits in the last 3 months, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, partly offsetting that concentration.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, so recent development activity is limited even though the release history remains active.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected; this is a modest transparency and maintenance gap for a dependency project.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a minor governance gap rather than evidence of unsafe code.