wave8/factotum-cms

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation. This is worth noting for reproducibility, but the signal provides no evidence that it is unsafe or unusually invasive.

Release historycaution

The package has only 3 releases, all within a brief burst, and the latest release was nearly five months ago; this weakens evidence of ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package and its README does not mention wave8/factotum-cms, so the package-to-source relationship is not clearly established; organization backing partly offsets this concern.

Repo popularitycaution

The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal for this young package.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented; this is a transparency gap for a CMS module.