larva/think-skeleton

Release historydanger

This is the package's only release, published about 4 years and 8 months ago, with no releases in the last 12 months. That strongly indicates abandonment despite the package remaining available.

Lifecycle scriptscaution

The package runs post-autoload-dump and post-root-package-install scripts during Composer operations. These add some installation and maintenance surface, but are not by themselves evidence that the release is unsafe to depend on.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history's long inactivity and leaving no evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, showing a defined build ecosystem, but no security scanning tools were found. This is a minor transparency gap rather than a primary health risk.

Security policycaution

The repository has no security policy, reducing guidance for reporting and handling vulnerabilities. This is a secondary hygiene concern alongside the much stronger evidence of inactivity.