guanguans/music-dl

Lifecycle scriptscaution

Post-install and post-update Composer scripts run during dependency operations, adding execution surface that consumers should understand before installation.

Maintainerscaution

Two registry publishing accounts are listed. This is modest publishing coverage, but repository activity provides additional evidence of ongoing ownership.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated recent contribution pattern represents a genuine bus-factor concern.

Repo bus factorcaution

One contributor made 100% of the 2 recent commits, creating a concentrated maintenance dependency without organizational backing shown by the repository ownership data.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, with one active maintainer, so direct recent development activity is thin despite the release and pull-request history.