joshhornby/php-git-hooks

Release historydanger

The package has 16 releases, but its latest release was over ten years ago and it has had no releases in the last 12 months. That strongly indicates abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No current development capacity is visible.

Dependency profilecaution

The package declares 14 runtime dependencies for a Git-hook utility, including several testing and code-quality components. This creates a relatively broad maintenance and compatibility surface for an old release.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. Because these execute during dependency operations, they increase integration and supply-chain exposure even though they are part of this package's hook-oriented function.

Security policycaution

The linked repository has no security policy and no documented security-scanning tool. This is a transparency and vulnerability-response gap, especially for a package that executes project hooks.