koriym/param-reader

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts, adding execution during dependency operations; no provided signal shows these scripts are harmful, so this is a limited supply-chain concern.

Release historycaution

The package has only 2 releases since March 2022, with the latest in May 2024 and none in the following two years, indicating limited ongoing release activity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the long release gap and raising maintenance concerns.

Workflow auditcaution

All 4 workflows were analyzed with no dangerous triggers or audit findings, but all 14 action references are unpinned, leaving build inputs exposed to upstream changes.