polymorphine/dev

Maintainerscaution

Only one registry account has publish access, which is a modest publishing-resilience concern. The organization-owned repository and active source activity provide some compensation, so this is caution rather than a severe risk.

Repo bus factorcaution

All 19 commits in the last 3 months came from one contributor, creating a concentrated maintenance dependency. The organization-owned repository offers some ability to hand maintenance off, but no second active contributor is shown.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 1 watcher, indicating limited adoption or visibility. Popularity is supporting evidence only, and the active release and commit signals outweigh this weakness.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. The missing security tooling lowers transparency somewhat, though it is not evidence of package abandonment or unsafe behavior on its own.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it does not outweigh the evidence of active maintenance.