glueful/runiva

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance concentrated in a single person. Organization backing offers some continuity but does not show a second active contributor.

Repo commit activitycaution

Only two commits were recorded in the last three months, so repository activity is light despite the strong release cadence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and oversight gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

The release is not a prerelease, but the package remains below version 1.0, so its public API may still change. Recent release activity partly offsets that maturity concern.