lyhty/commands

Release historycaution

The package has released eight times since July 2022 and shipped a release in the past year, but only one release in that period indicates a modest cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. Although the recent release is evidence of some activity, this still leaves weak evidence of continuing maintenance between releases.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. For a small PHP package this is a modest transparency and assurance gap rather than a severe risk.

Security policycaution

The repository has no security policy, so users have no documented security-reporting process or expectations for handling vulnerabilities.