kantorge/yaffa

Dependency profilecaution

The application declares 30 runtime dependencies, including substantial framework, database-adjacent, document, AI, and monitoring components. This breadth increases update and compatibility surface, but fits the package's full web-application scope.

Lifecycle scriptscaution

The package uses four Composer lifecycle scripts, including post-update and post-create hooks. These are relevant installation complexity, though they are common for a Laravel application and are not by themselves evidence of poor health.

Project backingcaution

The repository is owned by a personal account rather than an organization, so the heavily concentrated recent commit activity has no demonstrated organizational handoff buffer.

Repo bus factorcaution

Two contributors were active, but one made 77 of 78 recent commits, leaving maintenance highly concentrated and making continuity dependent on one person.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response for a self-hosted financial application.