switon/query

Dependency profilecaution

Six runtime dependencies, including several related Switon components, create meaningful coupling and a wider maintenance surface. The profile is coherent for a framework query builder, so this is a modest concern rather than a severe dependency risk.

Project backingcaution

The registry namespace and repository are tied to the same user-owned Switon project rather than an organization. This provides direct ownership context, but not the broader maintenance capacity an organization might offer.

Release historycaution

This is a young package, 106 days old, with only one release and no established release cadence. That limits evidence of maturity, though the absence of a long release history is expected for a new project rather than an abandonment finding by itself.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. For a package only 106 days old this may reflect an initial release settling, but it leaves current maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The repository has other transparency signals, including tests and a security policy, which keep this from being a major concern.