flagsmith/flagsmith-php-client

Repo bus factorcaution

All commits in the last 3 months came from one contributor, creating a narrow recent contributor base. Organization backing reduces handoff risk, but it does not replace evidence of broader active contribution.

Repo commit activitycaution

Only 1 commit was made in the last 3 months by 1 active maintainer. Recent releases compensate for some of this weakness, but the low commit activity leaves maintenance momentum uncertain.

Repo issue activitycaution

The repository had 2 new issues and 2 merged pull requests in the last month, although no issues were closed and 11 remain open. This shows some responsiveness but also unresolved backlog.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected. Build tooling is present; the missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. That is a real disclosure-process gap for a client library, though it does not by itself show abandonment or make the package unfit.