ticketeradigital/bsale

Lifecycle scriptscaution

A post-autoload-dump install script is present; this is a mild supply-chain consideration, but the signal alone does not show unsafe behavior.

Maintainerscaution

Only one registry account has publish access, which creates publishing continuity risk, although the organization-backed repository provides some compensation.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is the clearest maintenance concern despite recent registry releases.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, indicating a very small external user and contributor base; popularity is supporting evidence rather than a verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene weaker than it could be.