hprotravel/php-utils

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no meaningful replacement identified. This is a major maintenance and adoption risk even though the latest release is recent.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These hooks require extra review because they execute during dependency operations, although this signal alone does not establish malicious behavior.

Version stabilitycaution

The assessed release is not a prerelease, but the package is still on major version 0, so its public API may remain subject to breaking changes. The absence of recent prereleases is a small positive.