dbp/relay-base-course-bundle

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern and conflicts with the recent release and pull-request activity.

Lifecycle scriptscaution

The package uses a post-autoload-dump lifecycle script. This is common Composer behavior, but it adds install-time execution that consumers should account for.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.

Security policycaution

No repository security policy was found. For a maintained library this reduces disclosure transparency, although the package's tests, licensing, and release history provide some compensating project hygiene.

Version stabilitycaution

Version v0.2.20 is not a stable major release, so compatibility expectations are lower than for a 1.x package. It is not marked as a prerelease, which partly offsets that concern.