xqkeji/xq-app-admin

Dependency profilecaution

The package declares 12 runtime dependencies and no development dependencies. This is a substantial dependency surface for an administrative module, increasing maintenance coupling, though the dependencies are explicitly declared.

Repo bus factorcaution

All 10 recent commits came from one contributor, so maintenance knowledge and release capacity are concentrated in a single person without evidence of an active backup.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are present. That weakens supply-chain hygiene and gives less evidence that dependency or build risks are checked automatically.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified. This is a transparency gap, though not evidence of unsafe code by itself.