ikkez/sugarcore-kickstart

Lifecycle scriptscaution

The package runs a post-install command. Install-time execution adds operational risk for consumers and warrants inspecting the command before adoption.

Release historycaution

This is the sole release, published about 6 years and 10 months ago, with no releases in the last 12 months. That materially raises maintenance and compatibility risk despite the repository remaining active.

Repo bus factorcaution

One contributor made 100% of the recent commits. With a user-owned project and no second active contributor, maintenance depends entirely on one person.

Repo commit activitycaution

The repository recorded one commit in the last 3 months from one active maintainer, showing some current activity but very limited maintenance capacity.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not by itself evidence of unsafe code.