run_as_root/business-metrics-report

Release historycaution

This is a new package with only one release, published within the last day. That leaves little evidence of release stability or long-term maintenance.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months, although the repository was only created or pushed within the last day. There is not yet enough activity to establish maintenance capacity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Because the project is less than a day old, this is weak maturity evidence rather than a severe standalone risk.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning reduces supply-chain transparency without making the package unfit by itself.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.