fleetbase/valhalla-api

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. Although the repository is organization-backed and likely related, the missing explicit identification makes package provenance less transparent.

Repo popularitycaution

The repository has zero stars and zero watchers, with two forks. Low visibility provides little supporting evidence of maturity, although popularity is not decisive for a small organization-owned package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a hygiene weakness rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That reduces vulnerability-reporting transparency, though the available maintenance and release evidence partly offsets it.

Version stabilitycaution

Version 0.0.4 is not a stable-major release, so its API may still change. It is not marked prerelease, which partly offsets the maturity concern.