acidwroc/grumphp

Release historydanger

The latest release was about six years ago, with no releases in the last 12 months. Despite 58 releases over the package's history, this prolonged inactivity is a strong abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates that maintenance has effectively stopped.

Lifecycle scriptscaution

The package uses post-install and post-update Composer scripts. For a Composer plugin that installs and manages code-quality hooks, this behavior is expected, but it increases installation-time behavior that consumers should understand.

Repo toolingcaution

The project uses Make and Composer, showing build structure, but no security scanning tools were detected. This is a smaller transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

No repository security policy was found. That makes vulnerability reporting and maintenance expectations less clear, especially for a plugin that runs during development workflows.