ereborcodeforge/durins-forge

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding execution during dependency installation or update. This is common for framework tooling but increases the trust and maintenance surface.

Release historycaution

The package is less than one day old, with 8 releases and a median interval of about 9 minutes. This shows active initial development but provides almost no evidence of sustained release stability.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tools were detected. That is a modest transparency and maintenance gap for a framework package.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented. This lowers transparency but is not evidence of abandonment by itself.

Version stabilitycaution

Version v0.2.5 is not a stable major release, so its public API and behavior may still change substantially. It is not marked prerelease, which modestly offsets that concern.