stevenfoncken/multitool-for-spotify-php

Dependency profilecaution

Fourteen runtime dependencies make the command-line application rely on a moderately broad dependency set, adding some maintenance surface without evidence of an unsafe or unusually complex profile.

Project backingcaution

The package and repository are owned by the same individual account, so there is no organization backing to offset the single-contributor maintenance concentration.

Release historycaution

Only three releases were published, with none in the last two years and three months. Recent repository commits partly compensate, but the registry release gap lowers confidence in ongoing delivery.

Repo bus factorcaution

All three recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is reported. That is a modest transparency gap rather than evidence of a compromised release.