drago-ex/project-backend

Lifecycle scriptscaution

Composer post-install and post-update scripts run automatically, adding installation-time behavior that consumers should understand before adoption.

Repo bus factorcaution

One contributor made all seven recent commits, giving the project a concentrated maintenance base; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Seven commits were made in the last three months, showing recent activity, although all activity comes from one maintainer.

Security policycaution

No repository security policy is present, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings or untrusted checkouts, but all six action references are unpinned, reducing build reproducibility and supply-chain control.