gcworld/orm

Lifecycle scriptscaution

The package uses a post-autoload-dump Composer script. This is an install-time behavior that deserves review, but the available package structure and documentation indicate it is part of the documented Composer installer workflow rather than unexplained behavior.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which is a genuine maintenance concern. However, the registry shows 16 releases in the last year and the repository was pushed at the assessed release, partially offsetting the signal.

Security policycaution

The repository has no security policy. This is a transparency gap for a package that handles database-backed models, although automated dependency scanning and audit tooling provide partial compensation.