hexmedia/starter

Release historydanger

This package has only one release, published over 12 years ago, with no releases in the last 12 months. That strongly indicates abandonment despite the stable version label.

Repo commit activitydanger

The repository had 0 commits and 0 active maintainers in the last 3 months, providing no evidence of current maintenance to offset the old release history.

Dependency profilecaution

The package declares 43 runtime dependencies and no development dependencies, creating a broad compatibility and maintenance burden for an old application skeleton.

Licensecaution

The artifact and repository contain license files, but the manifest declares proprietary while the detected main license is MIT. The mismatch reduces licensing transparency even though licensing material is present.

Lifecycle scriptscaution

Composer post-install and post-update scripts run during dependency operations, increasing installation complexity and the amount of package behavior that must be trusted.