joinapi/filament-utility

Package scaffoldingcaution

The package includes a README, and the repository uses GitHub Releases, but the README is only 52 characters and there are no tests or changelog. The missing tests and changelog are normal for the published artifact; the limited consumer documentation is a modest transparency gap.

Repo bus factorcaution

Two contributors were active recently, which provides some continuity, but one contributor made 80% of the five recent commits. This is a mild resilience concern for a user-owned project.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher, so independent adoption signals are limited. Popularity is supporting evidence rather than a requirement, and the recent release and commit activity compensate for much of this gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. The missing scanning is a transparency gap, though it is not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency but is not severe enough to outweigh the active maintenance evidence.