koh/sylius-a2a

Maintainerscaution

Registry publishing access is held by one maintainer. Because the repository is user-owned rather than organization-owned, there is no provided project-backing evidence that offsets this concentration.

Release historycaution

The package is effectively brand new: it is 0 days old despite 37 releases, all published within roughly 5 hours. That shows active initial work but provides little evidence of sustained maintenance.

Repo bus factorcaution

One contributor made 100% of the 22 recent commits. With user ownership rather than organization backing, a maintainer becoming unavailable would create a meaningful continuity risk.

Repo commit activitycaution

The repository has 22 commits in the last 3 months, indicating active development, but all activity is concentrated in one active maintainer. This is positive for current momentum but leaves limited maintenance redundancy.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. The gap is partly offset by the repository's separate security policy, but it still limits automated security hygiene.