tleckie/acl

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer represents a narrow apparent project backing. The effect is limited because registry access lists do not prove actual maintenance capacity.

Release historycaution

The package has only four releases, all published in May 2021, with no releases in the last five years. This is a substantial abandonment concern, although the stable 1.0.3 version reduces pre-release risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push. This materially increases abandonment risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these figures provide no supporting evidence of an active user or contributor community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. For an access-control library, that missing safeguard weakens maintenance transparency.