wundii/afterbuy-sdk-symfony-bundle

Lifecycle scriptscaution

The package declares post-install and post-update Composer scripts. These are not inherently unsafe, but they execute during dependency operations and warrant extra review compared with a package without lifecycle hooks.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no shown organizational handoff capacity to compensate for concentrated maintenance.

Release historycaution

The package has had three releases, all clustered on 18 June 2025, with no releases in the last 12 months. This suggests a slow release cadence and modest abandonment risk, although recent repository activity partly compensates.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active person. The individual-owned project has no provided organizational backing to offset that concentration.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing some ongoing activity, but the volume is low relative to the package's age.