tribe/core

Package scaffoldingcaution

The package includes a substantial README, which supports consumer onboarding. The absence of tests and a changelog in the published artifact is normal packaging practice, while the repository also reports neither, leaving modest documentation and verification concerns.

Repo bus factorcaution

One contributor made all commits in the last 3 months, concentrating current maintenance knowledge. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating very light recent development despite the active release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported, leaving a meaningful supply-chain hygiene gap for a framework package.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.