2rius/dart-transformer

Lifecycle scriptscaution

A post-autoload-dump install script runs during Composer setup. This is a supply-chain exposure worth noting, although the signal does not show that the script is malicious or unusually complex.

Maintainerscaution

One registry maintainer is consistent with the repository being owned by an individual, but it leaves the project dependent on a narrow maintainer base.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance slowdown for a young package.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, with two pull requests still open; this supports the picture of limited recent activity.

Security policycaution

The repository has no security policy, reducing the transparency of vulnerability reporting and response expectations.