zf1s/zend-service-livedocx

Package scaffoldingcaution

A README is present, but neither the artifact nor repository contains tests or a changelog. The README directs issues and pull requests to the main repository, which explains the minimal standalone package layout but does not compensate for the absence of repository tests.

Repo bus factorcaution

All recent commits came from one contributor, creating a thin active maintenance base. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 1 commit in the last 3 months, showing some current activity, though the volume is limited.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present. This is a transparency and maintenance-process gap rather than evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is partly offset by the repository's recent activity and organization backing.