kphcdr/ppphp

Release historydanger

The package has made no registry release in over seven years, with no releases in the last 12 months. Seven releases in total show some prior activity, but the long release gap raises abandonment and compatibility concerns.

Licensecaution

The package declares MIT in its manifest, but the repository license file is detected as Apache-2.0. This mismatch creates licensing ambiguity for dependents even though both are recognized open-source licenses.

Lifecycle scriptscaution

The package runs a post-root-package-install script during installation, adding executable install-time behavior that deserves review beyond ordinary dependency resolution.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, so the recent repository push does not demonstrate ongoing development.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.