silarhi/qif-library

Release historycaution

The package is less than a day old with four releases, so it has not yet demonstrated maintenance over time; the rapid initial releases do not compensate for the missing track record.

Repo bus factorcaution

All recent commits come from one contributor, creating a narrow operational bus factor; organization backing offers some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Only two commits from one active maintainer were recorded in the last three months; for a package less than a day old this is limited evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency gap rather than a severe concern.

Security policycaution

The repository has no security policy, reducing disclosure guidance for users, though this is a hygiene gap and not evidence of abandonment by itself.