horde/kolab_resource

Release historycaution

The package has only one release, published about 2 years and 9 months ago, with no releases in the last 12 months. That materially weakens evidence of ongoing maintenance.

Repo bus factorcaution

All recent repository commits came from one contributor. The organization-owned repository provides some handoff capacity, but current activity still depends on a single active contributor.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, from one active maintainer. This is some evidence of activity, but it is too thin to demonstrate a strong maintenance cadence.

Repo toolingcaution

Composer is used for builds, providing standard package tooling. No security scanning tool was detected, which is a modest transparency gap but not a standalone severe risk.

Security policycaution

The repository has no security policy or documented reporting path. That reduces transparency for handling vulnerabilities, although it is not evidence of a vulnerability itself.