onetoweb/mondu

Package scaffoldingcaution

The artifact includes a README and this exact version has GitHub release notes describing its changes. The absence of tests and a changelog in the published artifact is normal packaging practice, while the brief README limits consumer guidance.

Release historycaution

The package has only 4 releases since December 2022 and just 1 release in the last 12 months, indicating a modest maintenance track record. The latest release is current, so this is a concern rather than abandonment evidence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This may reflect the recent release timing, but it still provides weak evidence of ongoing maintenance capacity.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. For an API client this is a meaningful repository hygiene gap, though it is not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although the small project scope and organization backing partly offset the gap.