always-open/serp-api

Lifecycle scriptscaution

The package uses a post-autoload-dump install lifecycle script. Such scripts add execution during installation and therefore require more trust than a package without them.

Repo bus factorcaution

One contributor made all three commits in the last three months, creating a high concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only three commits were recorded in the last three months, all from one active maintainer. Recent releases and merged pull requests show activity, but the development base remains thin.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but it does not outweigh the active release and commit signals.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and maintenance gap rather than evidence of a security incident.