gravity-framework/grale

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, this provides little redundancy if that maintainer stops supporting the package.

Project backingcaution

The source repository is owned by an individual user, not an organization, so there is no demonstrated institutional backing to offset the single-maintainer and inactivity concerns.

Release historycaution

The package has only two releases, both made within about two days, and none in the last 12 months; the latest release was about 22 months ago. This is a substantial maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is configured. This is a modest transparency and maintenance gap for a package with no other visible assurance controls.