fabioaacarneiro/sfphp-framework

Lifecycle scriptscaution

The package runs a post-create-project-cmd lifecycle script, which adds install-time execution that consumers should understand before adoption.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.

Release historycaution

The package is only 3 days old but already has 34 releases, with a median interval of about 35 minutes; this shows active iteration but little maturity or stability history.

Repo bus factorcaution

One contributor made all 20 commits in the last 3 months, giving the project a very low bus factor and increasing abandonment or handoff risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.