openapi-tools/generator

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing the amount of code executed during dependency operations. No provided signal shows these scripts are unsafe, so this is a hygiene concern rather than a severe risk.

Release historycaution

The package is only 25 days old and has a single release, so there is not enough release history to demonstrate long-term maintenance or stability.

Repo bus factorcaution

One contributor made 100% of the three recent commits, creating a clear continuity risk. Organization ownership provides some handoff potential, but no second active contributor is shown.

Repo commit activitycaution

There were three commits in the last three months, all from one active maintainer. The recent activity is positive, but its low volume limits evidence of sustained maintenance capacity.

Repo toolingcaution

The project uses Composer and Make, but the collected repository data shows no security-scanning tools. This is a modest transparency and maintenance gap for a package with release automation.