cyberbugz/nebula

Release historydanger

The package has released nothing in the last 12 months, and its latest release was about 2 years and 9 months ago. Earlier release activity shows a real project history, but the prolonged current gap lowers confidence in ongoing maintenance.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating that maintenance has effectively stopped.

Lifecycle scriptscaution

The package defines four Composer lifecycle scripts, including post-create-project and post-update hooks. These can execute during installation or updates, creating extra consumer exposure even though lifecycle scripts are common in framework packages.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a transparency and hygiene concern, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a framework package handling application authentication and request flows, that reduces transparency around vulnerability reporting and maintenance response.