openpsa/org-openpsa-expenses

Release historycaution

The package has four releases over about 4 years, with a median interval of about 19 months and only one release in the last 12 months. A release was published recently, but the overall cadence is sparse.

Repo bus factorcaution

All three recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is evidenced, leaving a real continuity concern.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these low adoption signals provide little additional confidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.