harryes/crudpackage

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script runs package code during installation, creating some additional execution surface even though no more specific harmful behavior is shown.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no observed organizational backing to compensate for the thin maintenance evidence.

Release historycaution

Only three releases exist, and there were no releases in the last 12 months, which weakens confidence that the package is actively maintained.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, a concrete sign that maintenance has currently stalled.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.