lattice-php/core

Release historycaution

The package is only 37 days old but has had 53 releases, including a release within minutes of collection, showing strong current activity. Its short history still provides limited evidence of long-term maintenance.

Repo bus factorcaution

All observed recent commits came from one contributor, creating a thin operational base. Organizational ownership provides some handoff potential, but no second active contributor was observed.

Repo commit activitycaution

Only one commit from one active maintainer was observed in the last three months. The repository is very young, but the limited recent activity leaves maintenance continuity uncertain.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling was detected. The missing scanning is a transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This matters for a server-side framework component, though it is not by itself evidence of abandonment.