kenjis/ci4-app-template

Lifecycle scriptscaution

Post-install and post-update scripts run during Composer operations. This adds execution surface for consumers, though the signal does not show that the scripts are unsafe.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was over two years ago. Its 24-release history shows prior activity, but the current pause raises maintenance risk.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the long release pause and indicating current maintenance has effectively stopped.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one issue and one pull request still open. This supports the concern about limited current attention.

Security policycaution

No repository security policy was found. For a framework application template, that is a genuine transparency gap, although it does not by itself show unsafe code.