exposedev/expose

Lifecycle scriptscaution

A post-create-project-cmd lifecycle script runs during installation, which adds execution complexity and warrants review, but this alone is not evidence of poor maintenance or unsafe dependency use.

Repo bus factorcaution

All recent repository commits came from one contributor. Organization ownership provides some handoff capacity, but the observed short-term contributor base remains narrow.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer, indicating sparse recent development despite the recent package release history.

Repo toolingcaution

The project uses Composer and Box for builds, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less transparent even though the README provides a security contact.