alvincoded/grok-php-client

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer operations. Because its behavior is not detailed here, this adds some review overhead but is not by itself a severe health concern.

Maintainerscaution

One registry account has publish access. That is a thin publishing base for a user-owned project and offers little redundancy if the maintainer becomes unavailable.

Release historycaution

The package has had only 3 releases, with no release in the last 12 months and the latest release about 18 months ago. This points to stalled maintenance, although the short early release interval shows an initially active project.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. This is the clearest evidence of current maintenance risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence that the package is unsafe.