weline/module-eav

Project backingcaution

The repository owner is an individual account rather than an organization. Combined with concentrated recent commits, this provides less maintenance redundancy than organization-backed ownership.

Repo bus factorcaution

All 2 recent commits came from one contributor, giving the project a 100% top-contributor share. With no organization backing shown, maintenance continuity depends heavily on one person.

Repo commit activitycaution

The repository had 2 commits in the last 3 months, so it is not inactive, but the volume is modest for a framework module. This is a mild maintenance concern.

Repo package mentioncaution

The repository name does not match the package name exactly, and the README does not provide a detectable package-name mention. That creates some uncertainty that the linked repository is the intended source.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling is reported. This is a transparency and maintenance-hygiene gap, not evidence of unsafe code.