ankane/libmf

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts download or check a shared library during installation, adding execution and supply-chain exposure beyond ordinary PHP dependency resolution.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance gap, although the recent release provides some compensating evidence of activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy. This does not show a security defect, but it leaves vulnerability-reporting expectations undocumented.

Version stabilitycaution

v0.3.0 is not a stable major release, so its API may still change, although it is not marked as a prerelease and recent releases contain no prerelease versions.