pinga/tembo

Repo bus factorcaution

All four recent commits came from one contributor, creating a meaningful continuity risk. Organizational ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository had four commits in the last three months, so maintenance has not stopped, but the activity level is modest for a frequently released package.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. For a network-facing EPP client, the lack of documented vulnerability reporting and handling lowers transparency.