gcworld/objectmanager

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer installation; this is a modest review concern because installation performs package-defined actions.

Repo bus factorcaution

All 2 recent commits came from one contributor, creating concentration risk; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so its process for receiving and communicating vulnerability reports is not documented.