eazybright/status-page

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which adds execution during Composer installation. This is common for framework packages but still increases installation complexity compared with a package without lifecycle hooks.

Release historycaution

This is the package's only release, published over three years ago, with no releases in the last 12 months. That indicates limited maintenance evidence, although the repository is not archived.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for over three years. Its non-archived status does not demonstrate current maintenance.

Workflow auditcaution

All 11 analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit found no untrusted checkouts, script injection, or high-confidence findings, so this is a workflow hygiene concern rather than a severe risk.