tencentcloud/mmps

Repo bus factorcaution

One contributor made all 45 commits in the last 3 months, creating a genuine bus-factor concern. The organization-owned repository provides some ability to hand maintenance to another contributor, partly compensating for the concentration.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency gap, while the active release and commit history provide compensating maintenance evidence.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it is not evidence that the package is abandoned.