justinholtweb/craft-microscope

Maintainerscaution

Only one account has registry publish access, which creates some publishing concentration. Two active repository contributors provide partial practical compensation, but the project remains primarily dependent on one publisher.

Release historycaution

The package is only 40 days old with three releases and a median interval of about 20 days. The recent cadence is encouraging, but there is not yet a long maintenance record.

Repo bus factorcaution

Two contributors were active in the last three months, although the leading contributor made 75% of commits. The second contributor reduces, but does not eliminate, concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a young package this is a modest transparency and hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens the documented process for reporting and handling vulnerabilities, though it does not by itself show unsafe code or poor maintenance.