inachisphp/inachis

Dependency profilecaution

The release declares 46 runtime dependencies for a Symfony-based website framework, creating a broad update surface and more transitive maintenance exposure than a small library.

Licensecaution

The artifact includes an MIT license file, but the manifest declares the package as proprietary; that mismatch creates avoidable licensing uncertainty despite the available license text.

Lifecycle scriptscaution

Four Composer lifecycle scripts run during project creation, installation, updating, or autoload generation. This is relevant supply-chain and reproducibility risk, although lifecycle scripts can be expected for a framework-style application.

Release historycaution

The package has only two releases over 528 days, with one release in the last 12 months and a median interval of about 352 days. The recent repository activity partly compensates, but registry maintenance appears infrequent.

Repo bus factorcaution

One contributor made all 200 commits in the last three months, leaving no demonstrated backup maintainer for the active codebase.