assegaiphp/starter

Lifecycle scriptscaution

The package runs post-install and post-update scripts, which are expected for a project starter but increase install-time behavior and should be understood before use.

Release historycaution

The package is over three years old but has only two releases, with one release in the last 12 months and a median interval of about 1,324 days, indicating sparse release cadence.

Repo bus factorcaution

All seven recent commits came from one contributor, creating a significant single-maintainer continuity risk; organization backing partly compensates but does not remove it.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow has read-only permissions and no dangerous audit findings, but all three action references are unpinned, weakening build reproducibility and action supply-chain hygiene.