ikilobyte/pulsar-client-php

Project backingcaution

The registry namespace and repository owner match, but the owner is a user rather than an organization. The matching ownership supports authenticity, while the user-owned project provides limited redundancy for maintenance.

Repo bus factorcaution

One contributor made 100% of the commits in the last three months. The repository is user-owned rather than organization-owned, so there is no organizational backing shown to offset this concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, made by one active maintainer. Recent release activity compensates for some of this thin source activity, but the low current development volume remains a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and assurance gap for a package intended to handle messaging and authentication.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting and response expectations undocumented, which is a real but not decisive health concern.