aoe/restler

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer operations, adding execution complexity and a modest supply-chain exposure compared with a package without lifecycle scripts.

Repo bus factorcaution

One contributor made all two recent commits, concentrating near-term maintenance capacity despite the organization-owned repository.

Repo commit activitycaution

Only two commits were recorded in the last three months, so recent development activity is present but limited.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving security hygiene less visible.

Security policycaution

The repository has no published security policy, which weakens the documented process for reporting and handling vulnerabilities.