humans/avatars

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer installation, adding execution surface that deserves review before adoption.

Release historycaution

Only two releases exist, both in March 2024, with no release in roughly two and a half years. This is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the lack of recent releases and increasing abandonment risk.

Repo popularitycaution

The repository has zero stars and forks and one watcher, offering little evidence of broad adoption. Popularity is supporting evidence only, so this modestly reinforces the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of unsafe code.