glueful/flags

Repo bus factorcaution

One contributor made 100% of the recent commits, creating a real handoff risk. Organization ownership provides some capacity to transfer maintenance, so this is a caution rather than a severe abandonment signal.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. The missing scanning layer is a maintenance and transparency gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a package providing HTTP endpoints, CLI commands, and database-backed feature flags, that weakens disclosure and maintenance transparency.