jord-jd/uxdm-eloquent

Maintainerscaution

Only one registry account has publish access. That is a real publishing continuity concern for a user-owned project, although the repository shows the same owner actively releasing it.

Project backingcaution

The repository is owned by an individual account, not an organization. That is consistent with the single-maintainer and single-contributor findings and provides no broader project backing to compensate for them.

Repo bus factorcaution

One contributor made 100% of the commits in the last three months. Because the project is user-owned rather than organization-backed, there is no provided organizational handoff signal to offset this concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. Recent releases compensate for the low commit volume somewhat, but ongoing maintenance capacity appears limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a small package this is a modest transparency and process gap, not evidence of unsafe code.