fluxoft/migrant

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency installation or updates, increasing the execution surface compared with a package without lifecycle hooks. No provided signal compensates for that extra install-time behavior.

Release historycaution

The package has existed since 2015 and has seven releases, but it has had no release in the last 12 months; the latest release was about 20 months ago. This raises maintenance concern despite its established history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was pushed with the release, the lack of continuing activity increases abandonment risk.

Security policycaution

The repository has no security policy, so users are given no documented reporting or response process. This is a transparency and maintenance gap, but not severe on its own.

Version stabilitycaution

Version 0.10.2 is not a prerelease, which supports using this specific release, but the package has not reached a stable major version. That is a modest maturity concern rather than a severe risk.