fashionforhome/minventar

Release historydanger

There has been only one release, published nearly 11 years ago, with no releases in the last 12 months. This strongly indicates the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since its last push. No provided signal shows current maintenance to offset this.

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts, so installation and updates execute package-provided code. This is an additional supply-chain exposure for a package that is otherwise already difficult to trust as maintained.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is reported. The absence of scanning is a modest transparency gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, with no provided evidence of security scanning or another process that compensates for the gap.