ifds-oss/interchange

Lifecycle scriptscaution

A post-autoload-dump script is present. This is a real installation-time behavior that merits review, although the signal does not show a dangerous script or establish that it is inappropriate for this Composer package.

Release historycaution

The package is only 3 days old with 2 releases, so long-term maintenance and release durability are not yet demonstrated.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 0 watchers. This is weak adoption evidence, but the package is only 3 days old and popularity is supporting rather than decisive evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap relevant to supply-chain transparency.

Security policycaution

No repository security policy was found, reducing documented vulnerability-reporting transparency; this is a hygiene gap rather than evidence of abandonment.