gcworld/database

Dependency profilecaution

The package has 5 runtime dependencies, including Composer tooling and a project interface package. This is a moderate dependency surface rather than an unusually minimal one, so it adds some maintenance exposure.

Lifecycle scriptscaution

A post-autoload-dump script runs during Composer installation and creates a configuration file. The README documents its behavior and says existing configuration is preserved, which reduces but does not eliminate the added install-time complexity.

Repo bus factorcaution

One contributor made all 11 commits in the last 3 months, giving the project a concentrated bus factor. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo popularitycaution

The repository has 2 stars, 0 forks, and 1 watcher. This offers little community validation, though low popularity alone does not outweigh the package's active release history.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although the available security scanning partially compensates for it.