neomerx/limoncello-shot

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. Package-wide deprecation is a severe dependency risk even though the repository is not archived.

Release historydanger

The last release was in November 2015, and there have been no releases in the last 12 months. A package with about 10 years of release inactivity is unlikely to receive needed compatibility fixes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the long release gap, this indicates sustained abandonment rather than a brief pause.

Lifecycle scriptscaution

The package defines a post-root-package-install script, adding install-time behavior that consumers should understand. This is a hygiene concern, not a severe risk on its own.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, especially for an abandoned package.