tobento/app-card

Dependency profilecaution

Eight runtime dependencies create meaningful coupling for a small package, but they are coherent Tobento ecosystem dependencies rather than an unusually broad or opaque dependency set.

Project backingcaution

The repository is owned by a user account rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Repo bus factorcaution

All six recent commits came from one contributor, leaving maintenance and release continuity dependent on a single person.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving automated dependency or code-risk checks unconfirmed.

Security policycaution

The repository has no security policy, making vulnerability reporting and maintainer response expectations less transparent.