ondrakoupil/graphql-base-project

Release historydanger

The package has had only two releases, both in April 2018, and none in the last eight years. That is strong evidence of abandonment for a backend template that consumers may need to keep compatible with its dependencies.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since April 2018. The repository is not archived, but that does not compensate for the prolonged inactivity.

Lifecycle scriptscaution

The package defines a post-root-package-install script, so installation runs package-provided setup logic. This is not necessarily unsafe, but it adds installation behavior that should be understood before use.

Package scaffoldingcaution

A README is present, while the absence of tests and a changelog is normal for a published template and is not itself a packaging gap. The very short README provides limited consumer guidance.

Repo toolingcaution

Composer is used as the build tool, which is appropriate for this PHP package. No security scanning tools are configured, leaving a modest transparency and maintenance gap.