dmk/mkcache_queue

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This adds some installation complexity, but the signal does not show that the script is unsafe or unusually broad.

Release historycaution

The package has made seven releases since June 2023, but none in the last 12 months and the latest registry release was about 17 months ago. This is meaningful evidence of slowing maintenance for a maintained integration package.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this raises abandonment risk, though it does not prove the package is unmaintained.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not a severe dependency risk by itself.

Security policycaution

The repository has no security policy. That makes vulnerability reporting less transparent, although the package's small scope and organization ownership partly reduce the concern.