lavreek/request-receiver

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file. For an open-source dependency, this creates a meaningful adoption and redistribution concern.

Release historycaution

The package is only 44 days old and has two releases, both published within the same day. This is too little history to demonstrate sustained maintenance, though it is not evidence of abandonment by itself.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single person. No organizational backing is shown to compensate for that concentration.

Repo commit activitycaution

The repository recorded only two commits in the last three months, all within a very new project. This provides limited evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap for a dependency.