p-chess/chess-bundle

Repo bus factorcaution

All two recent commits came from one contributor, producing a 100% top-contributor share. The organization-owned repository provides some handoff capacity, but no second recent contributor is shown, so concentration remains a real risk.

Repo commit activitycaution

Only two commits were made in the last three months and just one maintainer was active. This shows recent activity but a low maintenance cadence, warranting caution rather than a severe abandonment judgment.

Repo popularitycaution

The repository has only 5 stars, 0 forks, and 2 watchers, which suggests limited adoption evidence. Popularity is supporting evidence rather than a decisive health measure, so this is a minor concern.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools are configured. Build reproducibility is supported, while security-process coverage is weaker.

Security policycaution

No security policy is present in the repository. This weakens vulnerability-reporting transparency, although it is a process gap rather than evidence that the package is unsafe.