enjoyscms/widget-yametrika

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing installation-time behavior and review surface even though this is not evidence of maliciousness by itself.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was about 17 months ago. Earlier releases show an established history, but the recent gap raises maintenance risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the release gap, this suggests maintenance has currently stalled.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is configured. The missing scanner is a transparency and hygiene gap, not a standalone adoption blocker.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.