win-local-inc/message-bus

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds installation behavior that should be understood, but its presence alone does not indicate poor package health.

Maintainerscaution

Only one registry account has publishing access. Organization backing partly compensates for this, but the registry still shows a thin direct publisher base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The same-day release and push show recent publication activity, but do not establish sustained development capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.