moorexa/fatapi

Release historydanger

Only two releases exist, with none in the last 12 months; the latest release was about three and a half years ago. This is strong evidence of abandonment for an actively maintained framework.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but that does not compensate for the absence of recent work.

Dependency profilecaution

The package declares 14 runtime dependencies and no development dependencies, creating a relatively broad runtime surface for a framework. The signal does not show that any dependency is unsafe, so this is only a modest caution.

Lifecycle scriptscaution

A post-create-project-cmd lifecycle script runs during project creation, adding install-time behavior that consumers should understand. It is a modest supply-chain hygiene concern, not a severe risk by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This weakens ongoing assurance, especially alongside the absence of recent activity.