ninedigit/ekasa-clientphp

Lifecycle scriptscaution

The package defines post-install-cmd and post-update-cmd scripts, creating install-time execution risk and requiring review even though this signal alone does not show malicious behavior.

Repo bus factorcaution

All recent commit activity is concentrated in one contributor, creating a low short-term bus factor; organization ownership partially compensates by providing potential maintenance handoff capacity.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer, showing that recent maintenance is sparse and potentially fragile.

Repo popularitycaution

The repository has only 1 star and 4 forks, indicating limited external adoption; this is supporting caution rather than a verdict because popularity is not required for a small stable package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a security-hygiene gap in the repository.