ruudk/code-generator

Lifecycle scriptscaution

A post-install command runs during installation, which increases supply-chain exposure compared with a package without install-time execution. No provided evidence shows that the script is malicious or unusually broad.

Project backingcaution

The registry namespace and repository are owned by the same individual account. This is consistent ownership, though it provides less organizational maintenance capacity than a backed project.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which weakens evidence of continuing maintenance. The recent release partly offsets this, but does not remove the activity gap.

Repo popularitycaution

The repository has five stars and one fork, indicating a small user and contributor footprint. Low popularity is only supporting evidence and does not by itself make the package unhealthy.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not evidence of unsafe code.