tomba-io/php

Release historycaution

The package is about 4 years and 11 months old but has only four releases, with a median interval of about 14 months; two releases in the last year show some recent activity but a sparse cadence.

Repo bus factorcaution

All three-month commit activity is concentrated in one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months. Recent activity exists, but the low volume provides limited evidence of sustained maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported. This is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no SECURITY.md or other reported security policy, leaving vulnerability reporting and response expectations unclear.