adhenrique/openkit

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during Composer operations, increasing install-time behavior and review surface. This is a modest supply-chain hygiene concern rather than evidence of abandonment.

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to compensate for the thin publishing base.

Release historycaution

Five releases arrived within roughly 10 days, with a median interval of about 12 hours, but no newer release has appeared in roughly 10 months. The early burst followed by a long pause suggests uncertain ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package less than a year old, that is meaningful evidence of stalled maintenance, though it does not by itself prove abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning coverage is a transparency and hygiene gap, not a verdict on the package.