seffeng/rules

Repo bus factorcaution

One contributor made all commits in the last 3 months. Because the project is user-owned rather than organization-backed, there is little visible handoff capacity if that maintainer becomes unavailable.

Repo commit activitycaution

Only one commit was recorded in the last 3 months. The recent release offsets this somewhat, but the observed repository activity is still thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP validation library this is a transparency and maintenance weakness, not a severe risk on its own.

Security policycaution

The repository has no security policy. That reduces disclosure transparency, although the package's small scope and limited dependency surface partly reduce the practical concern.

Version stabilitycaution

This release is not marked as a prerelease, but the package remains below major version 1. That signals some maturity limits without making the release unsuitable by itself.