blackpig-creatif/replique

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is common for framework packages but adds installation behavior that should be understood before adoption.

Release historycaution

The package has only 2 releases, first published about 181 days ago, with a median interval of about 13 days. This shows a young project with limited long-term evidence, but not abandonment.

Repo toolingcaution

Composer build tooling is present, but no repository security scanning tool was detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.

Token permissionscaution

Both workflows declare top-level permissions, with one read-only workflow and one workflow granting write access. Explicit permissions are good practice, though write access increases workflow exposure.