wangchengtao/tianque

Lifecycle scriptscaution

A post-install command runs during installation, adding execution during dependency setup and requiring more trust than a package without lifecycle scripts.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 3 recent commits came from one contributor, so maintenance and release continuity are exposed to a single person.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. This does not establish poor quality, but provides little external adoption evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a maintenance and review gap.