kuroragi/general-helper

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time script. Composer lifecycle execution deserves some caution because installation runs package code, although this signal does not show malicious or excessive behavior.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no organizational handoff capacity shown to offset the concentrated contributor base.

Repo bus factorcaution

All three recent commits came from one contributor, giving the project a very concentrated maintenance base and increasing abandonment risk if that contributor stops.

Repo commit activitycaution

Only three commits were made in the last three months, indicating limited development activity despite the strong registry release cadence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving an avoidable gap in automated oversight.