jambostack/jambo-api

Dependency profilecaution

The release declares 59 runtime dependencies, including framework, storage, search, authentication, and media components. That broad dependency surface increases upgrade and transitive-maintenance burden.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations. They may be normal Composer behavior, but they increase installation complexity and warrant checking before use.

Release historycaution

The package is only 110 days old, with 10 releases concentrated in 14 days and a median interval of about 2 hours 21 minutes. This shows activity but provides little evidence of long-term stability.

Repo bus factorcaution

One contributor made all 105 commits in the last 3 months. Organization ownership provides some handoff capacity, but there is still no observed second active contributor.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing automated scanning reduces assurance for a package with many runtime dependencies.