sweetchuck/composer-suite-cli

Project backingcaution

The repository is owned by an individual account rather than an organization. That does not make the package unhealthy, but it offers no organizational redundancy to offset the concentrated recent activity.

Release historycaution

The latest registry release was about two years ago, with no releases in the last 12 months. This suggests slowing maintenance despite a history of six releases since 2022.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance highly concentrated. The repository is user-owned rather than organization-owned, so no provided backing signal compensates for that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity. This reinforces the release-history concern, although it does show the repository is not entirely inactive.

Repo toolingcaution

Composer and Robo provide build tooling, but no security-scanning tools were detected. This is a modest hygiene gap rather than evidence that the release is unsafe.