lemmon/validator

Maintainerscaution

Only one registry maintainer is listed. That is consistent with the user-owned repository but leaves limited publishing redundancy.

Project backingcaution

The registry namespace and repository are owned by the same individual user, so the package has direct ownership alignment but no organizational backing shown by this signal.

Repo bus factorcaution

All 10 commits in the last three months came from one contributor, creating a real single-person continuity risk.

Repo popularitycaution

The repository has 5 stars and no forks or watchers, indicating limited external adoption; this is supporting context rather than evidence of unsafe maintenance by itself.

Repo toolingcaution

Composer build tooling is used, but no security scanning tools were detected, leaving security automation less visible than the otherwise well-structured project.