martechmagicians/referhub

Release historydanger

This is the package's only release, published about 3 years ago, with no releases in the last 12 months. That limited history and prolonged release gap materially increase abandonment risk.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. This is the strongest evidence that ongoing maintenance is not demonstrated.

Lifecycle scriptscaution

The package defines post-install and post-update scripts, which add execution during dependency operations. This is a supply-chain exposure to review, though the signal alone does not show that the scripts are harmful.

Repo toolingcaution

The repository uses Make and Composer, demonstrating basic build tooling, but it has no detected security scanning tools. That is a modest hygiene gap rather than evidence of abandonment on its own.

Security policycaution

No security policy was found, leaving vulnerability reporting and disclosure practices unspecified. For a referral system handling user and event data, this is a meaningful transparency gap.