ryunosuke/dbml

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding installation-time behavior that should be understood before use.

Maintainerscaution

Only one account has registry publishing access, which limits publishing resilience. The repository is linked to the same apparent individual, so this is a capacity concern rather than evidence of a mismatch.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This is a maintenance warning, although the registry still shows regular releases.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.