kigkonsult/phpjscalendar

Lifecycle scriptscaution

Post-install and post-update scripts run during Composer operations, adding operational and supply-chain exposure compared with a package without install-time code. No provided signal shows that these scripts are necessary or narrowly scoped.

Release historycaution

Only two releases exist, with none in the last 12 months; the latest was published nearly four years ago. This is meaningful abandonment risk despite the package having a stable major version.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long gap since the last release. This is the strongest evidence that current maintenance may have stopped.

Repo popularitycaution

The repository has only 3 stars, 1 fork, and 1 watcher, so there is little visible community support to compensate for the lack of recent maintainer activity. Popularity is supporting evidence rather than a verdict.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.