digedag/t3twigs

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during Composer operations. This is a real execution surface, but the signal does not show that it performs unsafe behavior.

Maintainerscaution

One registry maintainer is listed, which is a thin publishing base for a user-owned project and increases continuity risk if that person stops maintaining it.

Release historycaution

The package has existed for nearly five months but has only one release, so its maintenance track record is still limited.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign of stalled development for a package with only one release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-checking practices less transparent.