imiphp/imi-phar

Lifecycle scriptscaution

Composer install and update hooks run both before and after dependency changes. These scripts increase installation complexity and supply-chain exposure, even though they may be legitimate for this component.

Release historycaution

The package has existed for over four years with 16 releases and a historical median interval of about 15 days, but only one release appeared in the last 12 months. That recent slowdown is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and non-archived status partly compensate, but current maintenance capacity remains unclear.

Repo popularitycaution

The repository has one star, no forks, and one watcher. Low adoption is only supporting evidence, but it provides little external validation or visible community depth.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.