madcoders/sylius-rma-plugin

Lifecycle scriptscaution

The package runs post-create-project-cmd, post-install-cmd, and post-update-cmd scripts. Composer lifecycle hooks are not inherently unsafe, but they add install-time behavior that should be understood before adoption.

Repo bus factorcaution

Three contributors were active, but one contributor made 82.1% of the 39 recent commits. The organization backing provides some handoff capacity, but contribution concentration remains a maintenance risk.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security scanning tools were detected. That is a transparency and hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for adopters.

Version stabilitycaution

This is a prerelease (1.4.0-rc.1), and 56.25% of recent releases are prereleases, so compatibility may still change despite the stable major line.