lattice-php/form

Dependency profilecaution

The package declares 12 runtime dependencies, including framework, UI, validation, and content-processing components. This is substantial coupling for a young package and increases the maintenance surface, though the dependencies fit the documented form component.

Release historycaution

The package is only 37 days old but has 53 releases, with a median interval of about 8 hours. This shows active iteration, though the short history leaves limited evidence of long-term maintenance.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe abandonment signal.

Repo commit activitycaution

Only one commit was recorded in the last three months and only one maintainer was active. The recent release activity shows ongoing publication, but repository history still provides limited evidence of distributed maintenance.

Repo toolingcaution

Composer build tooling is present, showing a defined build path, but no security-scanning tools were detected. The missing scanning coverage is a meaningful transparency gap for a dependency.