glueful/tenancy

Repo bus factorcaution

All 12 recent commits came from one contributor, giving the project a single-person maintenance dependency. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This weakens the project's published process for handling vulnerabilities, although the active repository and documented package reduce the overall concern.