littler/fixer-rules

Lifecycle scriptscaution

The package runs post-autoload-dump, post-install-cmd, and post-update-cmd scripts. These hooks are expected for some Composer plugins but increase the review burden because installation and updates execute package code.

Release historycaution

The latest release was published in April 2023, and there were no releases in the following 12 months of observed history. This is a substantial maintenance concern for a package assessed in 2026.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but it shows no recent maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves a meaningful assurance gap alongside the package's install and update hooks.

Security policycaution

The source repository has no published security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.