allejo/bzflag-rendering.php

Lifecycle scriptscaution

The package runs a post-install command, which adds install-time behavior that should be understood before adoption. No evidence here shows that the script is dangerous, so this is a limited concern.

Project backingcaution

The registry and repository are both owned by the same individual account. This is coherent ownership, though it indicates a narrow project backing structure.

Release historycaution

The latest registry release was in April 2022, with no releases in the following four years. This is a substantial maintenance concern, although the repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the three months before collection. Combined with the old latest release, this points to reduced maintenance capacity.

Repo toolingcaution

The repository uses Composer, but no security scanning tool was detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.