guave/assetload-bundle

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the recent registry releases and repository push provide some compensating evidence.

Repo popularitycaution

The repository has zero stars and one fork, indicating limited external adoption and review. This is supporting caution rather than evidence of abandonment by itself.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. For a maintained dependency, that leaves a transparency and vulnerability-detection gap.

Security policycaution

The repository has no security policy, so it does not document a process for reporting or handling vulnerabilities. This is a moderate transparency gap, not evidence of a vulnerability.