bowphp/app

Lifecycle scriptscaution

The package defines post-create-project-cmd and post-root-package-install hooks, so installation performs lifecycle actions that increase integration and supply-chain exposure.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months, which is a meaningful maintenance warning despite the recent registry releases.

Repo issue activitycaution

There were 3 new pull requests in the last month and 9 open pull requests, showing some contributor activity, although none were merged in that period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable review gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a framework package.