kanvigo/audit-chronicle

Release historycaution

The package is only 63 days old and has two releases, both published within a very short initial burst; this provides little evidence of sustained maintenance.

Repo bus factorcaution

One contributor holds 100% of the two recent commits, leaving maintenance dependent on a single person in this user-owned project.

Repo commit activitycaution

Only two commits were recorded in the last three months, all from one active maintainer. That is some recent activity but weak evidence of ongoing maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a compliance-oriented integration, that is a meaningful transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that handles audit and compliance data.