answear/fox-post-parcel

Lifecycle scriptscaution

Composer post-install and post-update scripts add execution during dependency operations. They are a modest supply-chain exposure, although no other provided signal shows these scripts are malicious or unusually broad.

Release historycaution

The package has been published for about four years with nine releases, but only one release appeared in the last year. That suggests slower maintenance for a library with ongoing compatibility needs.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release was recent, the absence of recent development activity raises abandonment risk.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were merged in the last month. This provides little evidence of active community maintenance.

Repo popularitycaution

The repository has one star and one fork, indicating a very small external user base. Popularity is supporting evidence only, so this modestly limits visible adoption signals rather than making the package unfit.