tobento/app-notifier

Dependency profilecaution

The package declares 20 runtime dependencies, including many Tobento application components. This is a substantial integration surface, though it is consistent with the package's application-level notification role.

Repo bus factorcaution

All 2 recent commits came from one contributor, so maintenance depends heavily on a single active contributor and has limited handoff resilience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.