kumaomao/php-phantomjs

Release historydanger

This is the only release, published in March 2020, with no releases in the last 12 months. That long period without updates is strong evidence of abandonment risk.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since its release.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, increasing installation complexity and supply-chain exposure compared with a package without lifecycle hooks.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is reported. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented. This matters more because the project is otherwise inactive.