mlopez/trm

Project backingcaution

The linked repository is owned by a user account rather than an organization, so the small maintainer footprint provides limited visible backing for long-term maintenance.

Release historycaution

This is the package's only release, published over two years ago, with no releases in the last 12 months; that limits evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a project that has not received recent maintenance.

Repo popularitycaution

The repository has no stars or forks and only one watcher, offering little supporting evidence of broad review or community maintenance.

Repo toolingcaution

The repository uses Composer for builds, but it reports no security scanning tooling; this is a modest transparency and hygiene gap rather than a severe risk.