angkor/khmercut

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This is a limited supply-chain exposure because it executes during installation, though the signal does not show that the script is malicious or unusually broad.

Release historycaution

The package has five releases over about two years, with one release in the last 12 months and a median interval of about 124 days. The cadence is modest but the latest release is recent enough to avoid an abandonment conclusion.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months. The recent release partly offsets this, but the current lack of development activity raises maintenance risk.

Repo popularitycaution

The repository has two stars, zero forks, and one watcher. This indicates limited adoption, but popularity is supporting evidence rather than a health verdict.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe.