hwkdo/intranet-app-formwerk

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer installation. This is not inherently unsafe, but it adds execution behavior that consumers should understand before adoption.

Package scaffoldingcaution

The package includes a README and changelog, while the repository has tests. However, the README still contains untouched template text, reducing documentation transparency.

Project backingcaution

The repository owner is a user account rather than an organization, so there is no provided evidence of organizational handoff capacity to offset the concentrated contributor base.

Repo bus factorcaution

All four recent commits came from one contributor, so maintenance depends entirely on a single active developer.

Security policycaution

The repository has no security policy. That does not show a security defect, but it leaves vulnerability-reporting and response expectations undocumented.