frdl/codebase

Lifecycle scriptscaution

The package defines post-create, post-install, post-root-package-install, and post-update Composer scripts. Install-time code increases dependency and review burden, although lifecycle scripts can be legitimate for Composer packages.

Release historycaution

The package has 54 releases since December 2021, but none in the last 12 months and its latest release was in November 2024. This established history helps, but the current release gap raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a meaningful abandonment risk despite the repository remaining available.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported. Build support is positive, while the missing security checks modestly reduce transparency and maintenance confidence.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations unspecified. The absence of security-scanning tools in repo_tooling provides no compensating evidence.