nckrtl/launch-starter-kit

Lifecycle scriptscaution

Four install and update lifecycle scripts run automatically, which is expected for a Composer starter kit but increases the amount of package behavior to inspect before use.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated contributor activity is not offset by visible organizational backing.

Release historycaution

The package is 42 days old and has only one release, so there is little release history from which to judge long-term stability.

Repo bus factorcaution

Two contributors are active, but one accounts for about 91% of the last three months' commits, leaving maintenance highly concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful verification gap for a package that installs application code.