serendipity_hq/bundle-users

Dependency profilecaution

The package has 10 runtime dependencies, including Doctrine and several Symfony components. This is a meaningful dependency surface for a user-management bundle, though the signal provides no evidence of abnormal or excessive dependencies.

Lifecycle scriptscaution

The package runs post-install and post-update commands, which add install-time behavior and operational risk compared with a passive library.

Maintainerscaution

Only one registry account has publish access. That is a limited publishing base for a user-owned project, although recent releases and repository activity show the account has remained active.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer does not have broader organizational backing shown by this signal.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Recent release history partly offsets this, but the current development lull raises abandonment risk.