hostnet/entity-blamable-component

Dependency profilecaution

The package has four runtime dependencies, including Doctrine ORM and a related Hostnet component; this is a meaningful integration surface but not an excessive dependency burden for its stated library role.

Repo bus factorcaution

All recent commits came from one contributor, creating a narrow operational maintenance base; organization backing partly reduces the handoff risk.

Repo commit activitycaution

Only one commit was made in the last 3 months by one active maintainer, which indicates limited recent development despite the very recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-process coverage limited.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting and handling vulnerabilities, although the package is small and otherwise has active source maintenance.