magento/magento-composer-installer

Repo bus factorcaution

All two recent commits came from one contributor, producing a 100% top-contributor share. Magento's organization ownership provides some handoff capacity, but no second recent contributor is shown, so this remains a caution.

Repo commit activitycaution

Only 2 commits occurred in the last 3 months, from one active maintainer. A recent release and Magento organizational backing compensate for some of the low volume, but the limited activity still raises maintenance-continuity concerns.

Repo issue activitycaution

There are 10 open pull requests, but no new or merged pull requests in the last month and no closed issues in that period. This suggests limited recent project throughput, though the null open-issues count prevents a stronger conclusion.

Repo toolingcaution

Composer and Phing build tooling are present, but no security-scanning tools are configured. Build reproducibility is supported while security-process transparency is weaker.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations undocumented.