hostlink/vx

Release historydanger

The package is 1,719 days old with four releases, all clustered in January 2022, and none in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository has zero commits and zero active maintainers in the last three months, consistent with the last push occurring in January 2022. This materially increases abandonment risk.

Licensecaution

No declared license, license file, or repository license file was identified. This creates a material legal and adoption risk for a dependency.

Lifecycle scriptscaution

The package runs a post-create-project-cmd script during installation or project creation. This is not inherently unsafe, but it increases the need to inspect installation behavior.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. That is a maintenance and transparency gap, though it is less severe than the stale activity.