haikiri/vkbrown

Licensecaution

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. That limits transparency and may restrict dependency use.

Package scaffoldingcaution

The package and repository contain tests, which supports basic project maturity, but no README is present for consumers of this PHP library. The missing changelog is normal packaging practice and is not a concern by itself.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer represents a genuinely thin apparent ownership base. Recent release activity provides some counterweight but not strong institutional backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the release history is active, the lack of recent source activity weakens confidence in ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured. This is a transparency and hygiene gap rather than evidence that the package is unsafe.