jayeshmepani/swiss-ephemeris-ffi

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, adding execution-time supply-chain exposure beyond ordinary file installation.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer provides limited visible redundancy for ongoing support.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the release was pushed recently, this sustained quiet period is a maintenance concern for a young package.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tool was detected, leaving a repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how consumers should report vulnerabilities in a package that bundles native libraries.