mselbach/static-info-tables-ua

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation. This adds some execution surface, but the signal alone does not show unsafe behavior.

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this represents a real continuity concern.

Project backingcaution

The registry and repository are both owned by the same individual user, confirming that the single-maintainer concern is not offset by organizational backing.

Repo bus factorcaution

One contributor made 100% of the recent commits. With user ownership and no organizational backing, maintenance depends heavily on that individual.

Repo commit activitycaution

There was one commit in the last three months, with one active maintainer; the recent activity is positive but thin.