unusualify/modularity

Registry deprecationdanger

Packagist marks this package as abandoned and points users to unusualify/modularous. That is a severe adoption and continuity concern even though other signals show the replacement repository remains active.

Dangerous workflowscaution

Fourteen workflows were analyzed and no pull_request_target, workflow_run, or untrusted-checkout risks were found, but two workflows contain script-injection findings. This warrants workflow review before trusting the repository automation.

Dependency profilecaution

The package declares 32 runtime dependencies and 10 development dependencies, including multiple framework integrations and operational components. This broad dependency surface increases upgrade and transitive-maintenance burden.

Lifecycle scriptscaution

The package defines a post-autoload-dump install-time lifecycle script. This is not inherently unsafe, but it adds installation complexity and warrants review before adoption.

Repo bus factorcaution

The top contributor made about 92.2% of the 374 recent commits, while two other contributors remained active. Organization backing provides some handoff capacity, but the concentration still creates continuity risk.