bitbag/google-analytics-4-plugin

Lifecycle scriptscaution

The package declares post-create-project-cmd, post-install-cmd, and post-update-cmd scripts, so installation and updates can execute package-defined commands. This is a supply-chain hygiene consideration, although lifecycle scripts are common in Composer projects.

Release historycaution

Only two releases have appeared across about 604 days, with one release in the last 12 months. The latest release is recent, but the sparse cadence limits evidence of sustained maintenance.

Repo bus factorcaution

One contributor made all three commits in the last three months, concentrating current maintenance in a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded three commits in the last three months, showing recent activity but at a low volume for a package with only one recent release.

Security policycaution

The repository has no security policy file, leaving vulnerability reporting and response expectations undocumented.