model/core

Licensecaution

No declared license, detected license, license file, or repository license file was found. That creates a real adoption and transparency concern for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is concerning for maintenance continuity, although the recent registry release history provides partial compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest supply-chain hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations.

Version stabilitycaution

Version v0.4.3 is not marked prerelease, but the package remains below a stable 1.0 major version, leaving some API-maturity uncertainty.