evilstudio/composer-parser

Project backingcaution

The repository is owned by an individual user rather than an organization, so the one-person commit concentration represents a genuine succession risk rather than an organization-managed maintainer structure.

Repo bus factorcaution

All 13 commits in the last three months came from one contributor, leaving maintenance highly dependent on a single person and creating a meaningful continuity risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little independent evidence of community adoption. This is supporting evidence only and is outweighed by the active release and commit history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a transparency gap, though it does not outweigh the package's active maintenance and tests.

Security policycaution

No repository security policy was found, so the project gives no documented channel or process for reporting vulnerabilities. This lowers transparency but is not by itself evidence that the release is unsafe.