evoweb/store-finder

Lifecycle scriptscaution

The package runs post-autoload-dump, post-install-cmd, and post-update-cmd scripts, which increase install-time execution surface and warrant caution even though no malicious conclusion follows.

Project backingcaution

The repository owner is an individual account rather than an organization, so there is no provided organizational backing to offset the concentrated recent contribution pattern.

Release historycaution

The package has 66 releases over roughly 9 years, but only one release in the last 12 months; the latest release was about 8 months before collection, indicating a relatively sparse recent cadence.

Repo bus factorcaution

All 14 recent commits came from one contributor, so maintenance knowledge and continuity are concentrated in a single person.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected; the build tooling is useful, while the missing scanning is a modest transparency gap.