slothsoft/core

Dependency profilecaution

Fourteen runtime dependencies, including several PHP extensions and external libraries, create some dependency-surface complexity, though this is reasonable for a broad shared utility package.

Maintainerscaution

Only one registry account has publish access, which is a resilience concern, although registry access records do not establish who actively maintains the project.

Project backingcaution

The repository is owned by the user account Faulo rather than an organization, so the single-contributor and single-publisher concerns are not compensated by organizational backing.

Repo bus factorcaution

All 77 recent commits came from one contributor, creating a genuine single-maintainer continuity risk; the repository owner is an individual rather than an organization, so there is no provided project-backing evidence to compensate for this concentration.

Repo issue activitycaution

There is one open issue, with one new issue and no closed issues in the last month; this is a small unresolved maintenance signal, but the absence of pull requests is not severe given the active commit history.