thomas-institut/apm-publication-api

Package scaffoldingcaution

The published artifact has no README, but the source repository has tests and the package is a library with substantial source coverage; the missing artifact README is a consumer-documentation gap rather than a maintenance failure.

Release historycaution

Fourteen releases have been published over 116 days, including the assessed release today, showing active publishing. The short project history limits evidence of long-term durability.

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months. The same-day push and release show current activity, but the limited recent history still leaves maintenance continuity uncertain.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. This is a transparency and monitoring gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations unclear.