idci/tudor-estock-client-bundle

Release historycaution

The package is only 93 days old, with four releases clustered over about six days. That shows initial activity but provides little evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all recorded commits in the last three months. The organization-owned repository provides some handoff capacity, partly offsetting but not eliminating the concentration risk.

Repo commit activitycaution

Only one commit was recorded in the last three months. For a package this young that may reflect an early stable state, but it leaves maintenance continuity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and change-assurance gap.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not by itself evidence of unsafe code.