sandermuller/php-x402

Lifecycle scriptscaution

The package runs a post-autoload-dump script during Composer operations. Install-time execution adds some supply-chain exposure, although this single script is not by itself evidence of unsafe behavior.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the small project footprint.

Release historycaution

The package is young at 133 days and published 11 releases, with a median interval of about 4 hours. This shows strong initial iteration but does not yet establish long-term maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. For a package only 133 days old, that recent gap is a meaningful maintenance concern.

Repo popularitycaution

The repository has 1 star, 0 forks, and 0 watchers. This is limited supporting evidence of adoption, but popularity is not decisive for a small package.