vkm-apps/x-form

Maintainerscaution

Only one account has registry publish access. The linked repository is also user-owned rather than organization-owned, so there is no provided backing evidence to offset this concentration.

Repo bus factorcaution

One contributor made all commits in the last three months, giving the project a complete single-contributor concentration. No organization backing or second active contributor is provided to reduce that risk.

Repo commit activitycaution

Only one commit was recorded in the last three months. The recent release history compensates for some of this sparse activity, but the repository provides limited evidence of sustained development between releases.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are reported. This is a transparency and maintenance-hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, which is a modest transparency gap for a package used in applications.