moderntribe/square1-user

Package file treecaution

The artifact and repository each contain only User_Object.php and composer.json. The small scope may be intentional, but the minimal tree provides little transparency or supporting documentation for consumers.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Although the repository had a recent release, the lack of development activity reduces confidence in ongoing maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. This is a modest supply-chain hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small utility this is not severe, but it leaves vulnerability reporting and maintenance expectations undocumented.