koriym/data-file

Lifecycle scriptscaution

Composer post-install and post-update scripts add execution during dependency changes, increasing operational surface even though no specific harmful behavior is shown.

Maintainerscaution

One registry publishing maintainer is listed. This is a limited publishing base, but the repository is owned by the same individual, so the evidence does not show an unexplained ownership mismatch.

Project backingcaution

The registry namespace and repository owner are the same individual account, providing consistent ownership context but not evidence of organization-level backing.

Release historycaution

Only two releases have been published since June 2021, with no release in the last 12 months and the latest release in June 2024. This indicates a slow maintenance cadence, though the package is stable rather than prerelease.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the older latest release, this lowers confidence that maintenance fixes will arrive promptly.