neos/flow-base-distribution

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These are ordinary Composer hooks but add installation-time behavior that consumers should understand and trust.

Repo bus factorcaution

One contributor made all commits in the last three months, creating a thin active contributor base. Organization ownership offers some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent maintenance activity. The current release history provides context, but does not remove this concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a maintenance and transparency gap, partly offset by the repository's separate security policy.