aequation/labo

Release historydanger

This package has had only one release, published about two years ago, with no releases in the last 12 months. That leaves little evidence of sustained maintenance or release responsiveness.

Repo package mentiondanger

The linked repository name does not match the package name and its README does not mention the package. This makes package-to-source ownership unclear rather than merely reflecting a normal monorepo subpackage.

Dependency profilecaution

The package declares 53 runtime dependencies, spanning Symfony, Doctrine, EasyAdmin, Twig, and many other components. That broad dependency surface increases upgrade and compatibility burden for a package with only one release.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing the amount of code executed during dependency changes. This is a supply-chain and maintenance hygiene concern even though it is not a malware verdict.

Maintainerscaution

Only one registry account has publish access. The source repository is owned by an individual account, so there is no provided organization backing to compensate for the thin publishing base.