octadev/pvm

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last 3 months. This is the strongest concern because it indicates no recent development activity despite the recent registry release.

Package scaffoldingcaution

A substantive README is present, and missing tests or a changelog in the published package is not a concern because those commonly remain in source repositories. However, the repository also reports no tests or changelog, reducing maintenance transparency.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community adoption signal. Low popularity is supporting evidence rather than proof that the package is unsafe, but it leaves less external validation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a security-hygiene gap, although it is not by itself evidence of malicious behavior.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a library that executes workflows and supports persistence integrations.