mortenscheel/tracer

Release historydanger

The package has only two releases, both published in March 2025, with no release in roughly 18 months. This weakens evidence of ongoing maintenance for a young package.

Repo commit activitydanger

There have been zero commits and zero active maintainers in the last three months, consistent with no repository activity since March 2025. This is the strongest maintenance concern in the assessment.

Lifecycle scriptscaution

A post-create-project-cmd Composer lifecycle script runs during project creation. This is worth noting because it adds install-time behavior, but the signal does not show that it is harmful or unusually broad.

Maintainerscaution

Only one registry account can publish the package. That creates a limited publishing base, although the linked repository is owned by the same individual and the short registry list is consistent with personal ownership.

Project backingcaution

The registry namespace and repository belong to the same individual account rather than an organization. This is consistent ownership, but it provides limited evidence of institutional backing.