roolith/config

Project backingcaution

The repository is owned by an individual user rather than an organization, so the package appears to rely on a single-person project backing model; this is consistent with the single registry maintainer and limits visible redundancy.

Release historycaution

The package is mature in age but has only 3 releases over 2215 days, with a median interval of about 1108 days; one release in the last 12 months provides some evidence of continued publishing but the cadence remains very sparse.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, indicating currently dormant development; the recent release partially offsets this, but does not establish ongoing maintenance capacity.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 2 watchers, indicating very limited external adoption; popularity is supporting evidence rather than a standalone disqualifier, but this weakens confidence in community backing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling is reported. This is a modest transparency and assurance gap, not a severe risk by itself.