trunk/core

Dependency profilecaution

Nine runtime dependencies support substantial framework functionality, including authentication, database access, and asynchronous processing; this creates meaningful dependency surface but is proportionate to the package's stated scope.

Release historycaution

The package is only 55 days old, with seven releases concentrated within roughly six days. That shows early activity but does not yet establish a durable maintenance record.

Repo bus factorcaution

One contributor made all 21 commits in the last three months. That concentration leaves maintenance dependent on a single person and raises continuity risk.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. That weakens confidence that the linked source repository directly corresponds to this release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene unconfirmed for a framework with authentication and database features.