mammatus/terraform-events

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which increase installation-time execution exposure and deserve review before use even though no maliciousness verdict is being made here.

Release historycaution

The package is only 47 days old and has one release, so there is little release history from which to judge long-term maintenance or compatibility stability.

Repo bus factorcaution

One contributor made all four recent commits, creating a genuine single-person continuity risk. Organization backing provides some mitigation, but no second active contributor is shown.

Repo commit activitycaution

There were four commits in the last three months, showing recent work, but all activity came from one active maintainer, limiting demonstrated maintenance capacity.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected, leaving a modest transparency and preventive-maintenance gap.