quansitech/cmf-module-import

Licensecaution

The manifest declares a proprietary license and no license file was found, limiting clarity about reuse and redistribution rights.

Lifecycle scriptscaution

Post-install and post-update scripts add install-time execution surface, creating a modest supply-chain hygiene concern even though this signal alone does not establish unsafe behavior.

Release historycaution

Only two releases have been published since yesterday, so there is not enough history to demonstrate sustained maintenance or long-term stability.

Repo commit activitycaution

No commits or active maintainers were observed in the previous three months, but the repository and package are only about one day old, so this is insufficient history rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a meaningful repository hygiene gap.