nufat/nuphp

Dependency profilecaution

The package declares 18 runtime dependencies and no development dependencies, creating a relatively broad runtime maintenance and update surface for consumers.

Licensecaution

The manifest declares MIT, but artifact license files also identify GPL-2.0 and MIT licenses. These appear in bundled files, yet the mismatch leaves redistribution obligations unclear.

Lifecycle scriptscaution

The post-create-project-cmd script runs during project creation, adding installation-time behavior that should be understood before adoption. No evidence here shows that it is harmful.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 21 recent commits came from one contributor, so maintenance and review capacity are concentrated in a single person.