velliz/puko

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance highly dependent on a single person.

Repo commit activitycaution

The repository had two commits in the last three months, showing some recent maintenance, but the activity level is limited.

Repo popularitycaution

The repository has 8 stars and 4 forks, indicating a small user and contributor footprint. Low popularity is supporting caution rather than a verdict by itself.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. This is a modest supply-chain hygiene gap, partially offset by the otherwise clear package structure and provenance.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response procedures.