claytoncollie/tracking-code-for-google-analytics

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These add installation-time execution surface and warrant review, though the signal alone does not show harmful behavior.

Release historycaution

The latest registry release was in July 2022, with no releases in over four years. This is a substantial maintenance concern, although the repository remains available and unarchived.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. Combined with the absence of registry releases for over four years, this indicates weak current maintenance.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool was detected. For a small plugin this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and handling, though it is not evidence of a vulnerability itself.