mralaminahamed/surecart-stubs

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which add supply-chain and installation complexity compared with a package without install-time execution.

Release historycaution

The project is only 38 days old but has published 36 releases, showing strong recent activity while leaving limited evidence of long-term maturity.

Repo bus factorcaution

All 12 commits in the last three months came from one contributor, so maintenance depends entirely on a single person.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a gap in the project's automated security hygiene.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.