mnvx/syntax-tree

Release historydanger

The package has only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing installation complexity and the amount of code executed during dependency operations.

Maintainerscaution

Only one registry maintainer is listed, leaving limited apparent publishing redundancy; the linked repository is user-owned rather than organization-backed.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.