liquiddesign/liquid-monitor-connector

Dependency profilecaution

The package declares 13 runtime dependencies, including several framework and HTTP components. That is a meaningful compatibility and update burden, though it is not excessive enough on its own to make the release unfit.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which add installation-time behavior and modest supply-chain exposure. No provided signal shows those scripts are unsafe, so this is a limited caution rather than a severe risk.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 2 watchers. This provides little external adoption evidence, but popularity is supporting evidence and does not outweigh the active release and commit history.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. That leaves a real maintenance and transparency gap, although the absence of scanning alone is not evidence of unsafe code.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, but it is a hygiene gap rather than an abandonment signal.