beacon-hq/pennant-driver

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time script. This is common Composer behavior for framework package registration, but it adds installation behavior that consumers should understand.

Release historycaution

Six releases arrived within the last 12 months, showing an active initial launch, but all were concentrated early and the latest release was in December 2025. That leaves a meaningful gap before the assessment date.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a young integration package, that weakens evidence of continuing maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap for a package that connects applications to an external feature-flag service, though it is not severe on its own.

Version stabilitycaution

Version 0.2.1 is not yet at a stable major version, so compatibility and long-term API expectations are less established. It is not marked as a prerelease, which partly offsets the concern.