matusstafura/faker-commerce

Release historycaution

The package has only two releases over nearly four years, with one release in the last 12 months and a median interval of about 3 years 10 months. The recent v0.2.0 release shows activity, but the long gaps indicate limited release maturity.

Repo bus factorcaution

All five commits in the last three months came from one contributor, leaving maintenance dependent on a single active person. The user-owned project backing provides no shown organizational handoff capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small library this is a modest transparency gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment.

Version stabilitycaution

v0.2.0 is not a prerelease, but the package has not reached a stable major version. This is a modest maturity concern rather than a severe stability warning.