libpurecontent/ultimateform

Dependency profilecaution

The package declares three runtime dependencies and no development dependencies. The runtime dependency count is manageable, though the absence of development dependencies is consistent with the repository's lack of tests and limits visible maintenance tooling.

Package scaffoldingcaution

A README is present, but neither the artifact nor repository contains tests or a changelog. For this very small five-file library, the missing tests still reduce maintenance confidence, while the missing changelog is a lesser concern given the frequent releases.

Repo bus factorcaution

All 10 recent commits came from one contributor, creating a thin maintenance base. Organization backing partly reduces handoff risk, but no second active contributor is shown.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. This is supporting evidence of limited external adoption, not a decisive concern because the package is small and demonstrably maintained.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool is configured. The missing scanning is a modest transparency gap rather than evidence of abandonment.