lasselehtinen/groschen

Dependency profilecaution

The package declares 11 runtime dependencies, including networking, authentication, parsing, and validation components; this is a meaningful dependency surface to maintain, though not by itself evidence of unfitness.

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base for a package with 11 runtime dependencies, although the matching personal repository provides some continuity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which conflicts with the recent release cadence and leaves uncertainty about ongoing source maintenance.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. Low adoption is supporting evidence of limited external validation, but it does not outweigh the strong release history on its own.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a maintenance and transparency gap rather than a standalone reason to reject the package.