mralaminahamed/dokan-stubs

Lifecycle scriptscaution

The package defines post-install and post-update scripts. These add install-time complexity and deserve review, although the available workflow evidence does not show dangerous automation.

Project backingcaution

The repository and registry are owned by the same individual account, not an organization. That makes the single-contributor concentration more consequential for long-term continuity.

Repo bus factorcaution

All 19 commits in the last 3 months came from one contributor. For a user-owned project this creates a real continuity risk, despite the strong recent activity.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. Build support is present, while automated security coverage is a transparency gap.

Security policycaution

No security policy was found in the repository. This is a modest transparency gap for reporting vulnerabilities, but it is not evidence that the package is unsafe or abandoned.