justus/flysystem-onedrive

Lifecycle scriptscaution

A post-autoload-dump install script is present. This is a mild execution-surface concern, but the signal does not show that the script is unsafe.

Repo bus factorcaution

All recent commits came from one contributor, so current maintenance has a single-person dependency; organization ownership provides some capacity for handoff but does not offset the observed concentration completely.

Repo commit activitycaution

Only one commit was made in the last three months, indicating limited recent maintenance activity even though it has not stopped.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving security-review automation limited.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerability reports are handled.