localizationteam/localizer

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. That is concrete evidence of slowing maintenance and raises abandonment risk despite the recent release.

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script. This adds install-time behavior that should be understood before adoption, but the signal does not show a dangerous action by itself.

Release historycaution

The package has been released since 2019 with 36 releases, but only one release appeared in the last 12 months. The recent release keeps this from being a severe concern, though the cadence is now slow.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less clear, lowering maintenance transparency.