ml-expansion/expansion

Release historydanger

The package has made no releases in the last 12 months, and its latest release was about nine years ago. Its earlier 12-release history shows past activity but does not compensate for the prolonged gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This is strong evidence that current maintenance capacity is absent.

Dependency profilecaution

The package declares six runtime dependencies, including platform extensions and server libraries. This is a meaningful integration surface for an old package, though the signal does not show excessive dependency complexity.

Lifecycle scriptscaution

A post-update-cmd lifecycle script runs during dependency updates, adding some installation-time behavior that consumers should account for. The signal does not by itself indicate severe risk.

Repo toolingcaution

The project uses Composer and Phing, showing build tooling, but has no reported security scanning. This is a minor transparency and hygiene gap rather than the main adoption concern.