fi/fifreecorebundle

Release historydanger

The package has 182 releases and a rapid historical cadence, but its latest release was about four years ago and it has had no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly four-year gap since the last push. This materially increases abandonment risk.

Dependency profilecaution

The package declares 24 runtime dependencies, including several framework, database, and UI-related components. That broad dependency surface increases upgrade and compatibility burden for an already inactive release.

Lifecycle scriptscaution

The package declares post-install and post-update scripts. These can be legitimate for Composer packages, but they add installation complexity and deserve extra scrutiny when maintenance is inactive.

Repo toolingcaution

Composer and Phing build tooling are present, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, especially for a package with many dependencies.