tobento/app

Dependency profilecaution

Fourteen runtime dependencies make the package depend on a moderately broad supporting stack, which adds update and compatibility surface, but the profile is coherent for a base application framework.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although releases have occurred recently, the lack of recent source activity is a maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. This is a transparency and maintenance-process gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency but does not by itself make the release unfit.