golem/auth-storage-symfony

Release historycaution

The package has existed for about 10 years but only 7 releases, with a median interval of about 19 months and one release in the last 12 months. The recent release shows activity, but the long cadence limits confidence in sustained maintenance.

Repo bus factorcaution

All 2 recent commits came from one contributor, giving the project a complete one-person commit concentration. This leaves a real continuity risk if that maintainer becomes unavailable.

Repo commit activitycaution

The repository recorded 2 commits in the last 3 months, so activity has not stopped. The volume is light for a dependency, consistent with the sparse release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small package this is a hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens disclosure transparency, although the package's small scope and other repository evidence partly limit the impact.