jambagecom/base-excel

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation. This adds build-time behavior that should be understood, although the signal does not show that it is unsafe.

Project backingcaution

The repository is owned by a user account rather than an organization, so the concentrated recent contribution activity is a meaningful bus-factor concern.

Repo bus factorcaution

All 5 recent commits came from one contributor, leaving maintenance dependent on a single active person and increasing continuity risk.

Repo commit activitycaution

The repository recorded 5 commits in the last 3 months, showing activity, but only one maintainer was active during that period.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected, leaving less automated evidence of dependency and build hygiene.