se7enxweb/exponential

Dependency profilecaution

The release declares 60 runtime dependencies, creating substantial compatibility and upgrade coordination risk for consumers. This is a real complexity cost, though the profile is explicit rather than missing.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing installation-time behavior and review surface. No other provided signal shows these scripts are unsafe, so this is a modest hygiene concern rather than a severe risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Recent registry releases provide some compensating evidence, but the lack of observed source activity remains a maintenance concern.

Workflow auditcaution

All 6 analyzed action references are unpinned, which leaves workflow dependencies exposed to moving revisions. Read-only permissions, no untrusted checkouts, no injection findings, and a complete audit reduce the severity.