sherlockode/configuration-bundle

Release historycaution

The package has nearly eight years of history and 30 releases, but only one release in the last 12 months indicates a slower current cadence than its historical pattern.

Repo bus factorcaution

All recent commits came from one contributor, creating maintenance concentration. The organization-owned project provides some handoff capacity, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity even though the repository received a current release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no SECURITY policy, reducing transparency about vulnerability reporting and response expectations.