linderp/sulu-base-bundle

Repo bus factorcaution

One contributor made 100% of the 12 recent commits. This creates a meaningful single-maintainer continuity risk, and the repository is user-owned rather than organization-backed.

Repo commit activitycaution

The repository received 12 commits in the last three months, showing ongoing work. However, all activity came from one active maintainer, limiting continuity if that person stops maintaining it.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although the source contents appear relevant, this leaves some uncertainty that the repository is the intended project backing.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The active tests and workflows provide some engineering discipline, but security-monitoring coverage is limited.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and coordinating security issues, though it is not evidence that the package is unsafe.