forme/crosswise

Release historydanger

The package is about 3 years 7 months old, has only two releases, and has had no release in the last 12 months. This is strong evidence of limited maintenance, although the linked repository was pushed more recently.

Lifecycle scriptscaution

The package runs a post-install-cmd script, which increases installation complexity and gives package code execution during installation. No compensating security or provenance signal was provided.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Despite the repository's more recent push, the observed current activity is weak.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest repository hygiene gap rather than evidence of unfitness by itself.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response, with no provided evidence compensating for the gap.