tyhpdef/symfony-polyfill-intl-grapheme

Release historycaution

This is the only release, published today, so there is no history showing sustained maintenance or release reliability. That is a meaningful evidence gap for a dependency, though its age limits how strongly it should be penalized.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Because the repository was created or updated today, this is weak evidence rather than proof of abandonment, but ongoing maintenance remains un demonstrated.

Repo toolingcaution

Composer is used as the build tool, which fits the package, but no security-scanning tools are configured. This is a repository hygiene gap rather than a severe supply-chain concern.

Security policycaution

The repository has no security policy. For a tiny generated type-definition metapackage this is a modest transparency gap, but it still leaves vulnerability-reporting expectations unspecified.