ferreira/curso-composer

Release historydanger

The latest release was nearly five years ago, with no releases in the last 12 months; this is strong evidence of abandonment for a package intended as a maintained dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.

Lifecycle scriptscaution

A post-update-cmd lifecycle script runs during dependency updates, adding some installation complexity, but this signal alone does not show a severe risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source relationship is unclear and may not reliably back this release.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the absence of workflows and the package's inactivity limit the significance of this gap.