isotopsweden/isotopcs

Release historydanger

Only one release exists, published about six years ago, with no releases in the last 12 months. That leaves little evidence of continued maintenance for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Its last push was about three years ago, so recent maintenance capacity is not demonstrated.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These add execution during dependency operations and deserve scrutiny, although the signal alone does not show harmful behavior.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, though the small package scope limits its weight.