tobento/app-crud

Dependency profilecaution

The package declares 26 runtime dependencies, forming a broad framework-oriented dependency surface. This is not inherently unhealthy, but it increases the amount of upstream maintenance on which the package relies.

Project backingcaution

The repository owner is identified as the user account tobento-ch rather than an organization, so the concentrated contributor activity is not visibly offset by organization-level handoff capacity.

Repo bus factorcaution

All 24 recent commits came from one contributor, giving the project a concentrated maintenance base and increasing continuity risk if that contributor becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations unclear.