oliverthiele/ot-flippingbook

Project backingcaution

The registry package and repository are both owned by the same individual account. This confirms source alignment, but provides no organizational handoff capacity to offset the concentrated maintainer base.

Repo bus factorcaution

One contributor made all 10 commits in the last 3 months, giving the project a complete single-contributor concentration. That creates a real continuity risk despite the recent activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP extension this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is a maintenance hygiene concern rather than a severe dependency risk by itself.