jeromeschneider/baikal

Dependency profilecaution

The release declares 22 runtime dependencies, including a substantial Symfony and Doctrine stack. This increases upgrade and compatibility complexity, but does not by itself indicate abandonment.

Licensecaution

The manifest declares MIT, but the artifact license file is detected as GPL-3.0; although license files are present, the mismatch requires clarification before depending on the release.

Lifecycle scriptscaution

post-install-cmd, post-root-package-install, and post-update-cmd scripts run during dependency operations. Install-time execution increases integration and supply-chain exposure compared with a package without lifecycle hooks.

Repo toolingcaution

The project uses Make and Composer and has a security policy, but no security-scanning tooling was detected. The missing automated scanning is a modest hygiene concern rather than evidence of unmaintained code.

Version stabilitycaution

The assessed version is explicitly 2.0.0-alpha2, while the registry profile lists 0.12.1 as latest and marks recent releases stable. That inconsistency and the alpha status make this release less mature for adoption.