xmas/at-xmas

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation; this adds execution surface and deserves review, although the signal does not show that it is harmful.

Release historycaution

Only two releases exist across 273 days, with about 251 days between releases; this is limited evidence of sustained maintenance for a young package.

Repo bus factorcaution

All recent commits came from one contributor, so maintenance depends heavily on a single person.

Repo commit activitycaution

The repository had one commit in the last three months from one active maintainer, providing only a thin record of current maintenance.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented.