focalcrm/core

Release historycaution

Five releases arrived within about three hours, showing active initial publishing but not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers over the last three months. Because the package is only about one day old, this does not prove abandonment, but it leaves maintenance capacity unestablished.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool is reported, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency around vulnerability reporting for a package handling CRM data models and API-related functionality.

Version stabilitycaution

v0.2.3 is not a stable-major release, so its API may still change; it is not marked as a prerelease, which partly offsets that concern.