elfeffe/textstat

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This adds some installation complexity and execution surface, but the signal alone does not show harmful behavior.

Release historycaution

Only two releases have been published, with no releases in the last 12 months and the latest release about 18 months ago. This indicates limited and currently inactive release maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the long release gap, this is meaningful evidence of stalled maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning layer modestly reduces supply-chain transparency.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap for a package intended for application use.