adam-clarey/acme-widget-co

Release historydanger

The package has had no releases in over six years and none in the past 12 months, indicating substantial abandonment risk despite five total releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and little evidence of ongoing maintenance.

Lifecycle scriptscaution

The post-install script initializes a SQLite database, creates tables, populates products, and changes file permissions. This is relevant operational behavior that increases adoption and deployment risk.

Repo package mentioncaution

The repository name does not match the package name, although its README does mention the package. That reduces concern but still leaves some uncertainty about repository ownership and packaging alignment.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. That is a modest hygiene gap, especially for a package with runtime dependencies and install-time behavior.