drunomics/php-project

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts, which execute during dependency operations and deserve review before adoption. This is a supply-chain exposure concern, not evidence that the package is malicious.

Release historycaution

The latest release was published over eight years ago, with no releases in the last 12 months. This is a substantial freshness concern for a dependency, although the repository is not archived and was pushed recently.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months. The recent repository push is a compensating sign of availability, but it does not demonstrate ongoing development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. For a small project template this is a hygiene gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.