stevebauman/autodoc-facades

Lifecycle scriptscaution

A post-update command runs during Composer updates, adding some install-time execution surface. The signal does not show a dangerous command or other evidence that makes this severe.

Project backingcaution

The registry namespace and repository owner match, and the repository is owned by the same individual rather than an unrelated project. A single-person project is credible but has limited organizational continuity.

Release historycaution

The project has 12 releases over roughly 2 years and 8 months, but only one release in the last 12 months, indicating a slower maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the package had a compatibility release during the broader period.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This weakens automated security hygiene without indicating that the package is unsafe by itself.