it-bens/api-platform-utilites-bundle

Release historydanger

The package has only two releases, with the latest published in October 2021 and none in the last 12 months. This is the main abandonment concern for a dependency at version v0.1.1.

Repo commit activitydanger

There were no commits and no active maintainers in the preceding three months. This weakens the evidence of ongoing maintenance and reinforces the stale release history.

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation. This deserves awareness because install-time behavior increases execution surface, but the signal does not show that it is unsafe.

Maintainerscaution

Only one account has registry publishing access. Organization ownership partly compensates for the thin registry maintainer list, but the observed zero recent commit activity leaves limited evidence of active stewardship.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.