buepro/typo3-user-pizpalue

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script during installation. This adds execution surface for consumers, although the signal does not show that the script is harmful.

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, this represents a thin publishing base and increases continuity risk.

Project backingcaution

The registry namespace and repository are both owned by the same individual account, providing consistent ownership but no organization-level backing.

Release historycaution

The package has 18 releases since June 2021, but no registry release in the last 12 months and the latest release was in August 2024. The repository was pushed more recently, which partly offsets but does not remove the release-cadence concern.

Repo commit activitycaution

The repository had no commits and no active maintainers in the three months before collection. The June 2025 push shows it was not abandoned indefinitely, but current maintenance activity is weak.