koh/sylius-auth-md

Project backingcaution

The repository is owned by a personal account rather than an organization, so the single-contributor concentration is not visibly compensated by organizational backing.

Release historycaution

The package is only 0 days old yet has 37 releases, with a median interval of 0 days. This shows active publishing but gives little evidence of a mature, settled release process.

Repo bus factorcaution

All 19 recent commits came from one contributor, leaving no demonstrated backup maintainer and increasing continuity risk for a newly released package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern, not proof of a security defect.