kazist/setup

Release historydanger

The latest release was published in June 2023, with no releases in the following three years; this strongly suggests the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Lifecycle scriptscaution

The package runs both pre-install and post-create-project Composer hooks, increasing the trust required during installation even though this is not itself evidence of malicious behavior.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling was detected; this is a minor transparency gap alongside the broader maintenance concerns.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities; this is secondary to the stronger evidence of inactivity.