dev-extensions/kernel

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which adds installation-time behavior that dependents must account for.

Project backingcaution

The repository is owned by a user account rather than an organization, so the concentrated commit activity provides less evidence of an institutional handoff path.

Repo bus factorcaution

Two contributors were active, but one made 27 of 29 commits, giving the project a highly concentrated maintenance base and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance-process gap.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.