doubleleft/hook

Release historydanger

Only two releases exist, with none in the last 12 months; the latest registry release was about 4 years ago and release intervals are very long. This is strong evidence of limited ongoing maintenance.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, while its last push was about 9 years ago. The release history does not compensate for this long period of source inactivity.

Lifecycle scriptscaution

A post-install Composer lifecycle script runs during installation. This adds operational and supply-chain exposure that developers should understand, although the signal alone is not evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. For a backend service handling authentication, data, and credentials, this weakens vulnerability-reporting transparency.

Version stabilitycaution

v0.4.0 is not marked as a prerelease, so the assessed release is presented as a normal stable release. Its pre-1.0 major version still indicates a less mature compatibility commitment.