horat1us/yii2-criteria

Maintainerscaution

Only one registry account has publish access. For this user-owned project that is a genuine continuity concern, although registry access alone does not measure actual contribution activity.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational maintenance backstop for the concentrated contributor base.

Repo bus factorcaution

One contributor made all commits in the last three months, so maintenance depends entirely on a single person without visible handoff capacity.

Repo commit activitycaution

There was one commit from one active maintainer in the last three months. Recent release activity helps, but the low commit volume gives limited evidence of sustained maintenance capacity.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling was detected. The absence of scanning is a hygiene gap, not evidence that the package is unsafe.