kleinweb/lib

Lifecycle scriptscaution

A post-autoload-dump Composer script runs during installation, adding execution-time supply-chain exposure, though this signal alone does not show that the script is unsafe.

Repo bus factorcaution

One contributor made all eight commits in the last three months, leaving maintenance highly concentrated; organization backing provides some capacity for handoff but no second active contributor is shown.

Repo issue activitycaution

The repository has six open pull requests and one open issue, but none were opened or closed in the last month; this suggests some unresolved work despite recent commits.

Repo popularitycaution

The repository has one star, zero forks, and two watchers; this is limited adoption evidence but is only supporting context and does not outweigh the active release history.

Repo toolingcaution

The project uses Just and Composer build tooling, but no security-scanning tools were detected, leaving a modest transparency and hygiene gap.