check24/apitk-common-bundle

Release historydanger

The package has 16 releases since 2018, but none in the 12 months before collection; its latest release was in February 2022, roughly four years ago. This is the strongest evidence of maintenance risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Lifecycle scriptscaution

A post-install-cmd script runs during installation, adding execution-time supply-chain exposure compared with a package that has no install lifecycle scripts.

Project backingcaution

The registry namespace is check24 while the linked repository is owned by the user byWulf, so organization backing is not established by the collected ownership data. The package-to-repository match signal provides some compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a moderate transparency and maintenance-hygiene gap rather than evidence of unsafe code.