htmlburger/carbon-fields-plugin

Repo bus factorcaution

All one recent commit came from a single contributor, creating concentrated recent activity. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating very thin recent maintenance activity. The recent release and organization backing provide some compensation, but this still lowers confidence in ongoing development capacity.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package assembly. No security scanning tools were detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy. That weakens its documented process for receiving and handling vulnerabilities, though it does not by itself show that the package is unsafe.