jord-jd/laravel-natural-where

Project backingcaution

The repository is owned by an individual user rather than an organization. This does not make the package unsafe, but it means the single-maintainer concentration is not visibly compensated by organizational backing.

Repo bus factorcaution

One contributor made all commits in the last three months, leaving maintenance fully concentrated in a single person. The repository is user-owned, so there is no organization backing shown to offset that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months. Although the repository was recently pushed, this low activity provides limited evidence of ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a package that extends a framework query builder, this weakens the documented process for reporting and handling security issues.