kohkimakimoto/altax

Release historydanger

The package has 32 releases since July 2013, but its latest release was November 21, 2017 and it had no releases in the last 12 months. That long publishing gap is a major maintenance concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for years. This strongly raises abandonment risk.

Licensecaution

The manifest declares Apache-2.0, the artifact contains a license file, and the repository has one as well. The detected MIT text alongside Apache-2.0 is a minor declaration mismatch worth checking.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. Such scripts expand installation-time behavior and deserve caution, though this signal alone does not indicate that the package is unsafe.

Maintainerscaution

Only one registry account, Kohki Makimoto, has publishing access. The repository is user-owned rather than organization-backed, so there is limited visible maintainer redundancy.