wyrihaximus/js-compress

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, adding supply-chain exposure and requiring more trust than a package without install-time behavior.

Repo bus factorcaution

All recent commits came from one contributor, so maintenance depends heavily on a single individual and has little demonstrated backup capacity.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer, indicating limited recent development activity despite the recent release.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tools were detected, leaving a modest gap in ongoing repository hygiene.

Security policycaution

The repository has no documented security policy, reducing transparency about vulnerability reporting and maintenance expectations.