ryunosuke/night-dragon

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These increase installation exposure and deserve caution even though the signal does not establish harmful behavior.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release history and repository push on the latest release partly offset this, but the short-term development lull remains a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no published security policy. For a template engine, this reduces the clarity of vulnerability reporting and maintenance expectations.