id/auto-sync-files

Release historycaution

The package is only 0 days old, with all 7 releases published within the same day. This shows active initial publishing but provides no evidence of sustained maintenance yet.

Repo bus factorcaution

One contributor made all 17 commits in the last 3 months, giving the project a concentrated maintenance base. That makes continuity dependent on a single active maintainer.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling was detected. This is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate that the release is unsafe.