exceedone/microsoft-graph

Package scaffoldingcaution

The artifact lacks a README, which is a transparency and consumer-documentation gap for a library, but it includes release notes for this exact version. The absent tests and changelog in the published artifact are normal packaging practice.

Release historycaution

The package has only one release, published about 1 year and 7 months ago, with no releases in the last 12 months. That leaves limited evidence of ongoing maintenance, although a small package may change infrequently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful sign of currently inactive maintenance, though it is not as severe as an archived repository.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no supporting evidence of broad community use or review. Popularity is only supporting evidence, so this lowers confidence more than it determines the verdict.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The absence of scanning is a modest transparency gap rather than a direct indication that the package is unsafe.