jinomdeveloper/jinom-token-management

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script runs during dependency installation. Its presence deserves attention because install-time code executes automatically, but no script behavior is provided to establish a severe risk.

Maintainerscaution

The registry has one publishing maintainer. The organization-backed repository makes a short registry access list less concerning, but it does not prove a broad active maintainer base.

Release historycaution

This is the only release, published 53 days after the package first appeared, so there is not yet enough history to establish durable maintenance.

Repo bus factorcaution

All six recent commits came from one contributor. Organization ownership provides some handoff potential, but no second active contributor is evidenced.

Repo commit activitycaution

Six commits from one active maintainer in three months show recent work, but the narrow activity base limits resilience if that maintainer stops contributing.