frontastic/common

Dependency profilecaution

The package declares 34 runtime dependencies spanning framework, HTTP, API, and integration components; this is a broad dependency surface that increases upgrade and compatibility burden, though it fits a common library covering many backend domains.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, with one active maintainer; this is recent activity but a thin maintenance pace for a package with a large codebase.

Repo toolingcaution

The repository uses Composer and Phing for builds, which supports reproducible project operations, but no security scanning tools were detected.

Security policycaution

The repository has no SECURITY policy, leaving vulnerability reporting and response expectations undocumented.