pavel852/latex

Lifecycle scriptscaution

The package defines a post-install-cmd script, adding install-time behavior beyond dependency resolution. No evidence here shows that the script is unsafe, so this warrants review rather than a severe health penalty.

Maintainerscaution

One registry maintainer, Pavel Bartos, is consistent with the linked repository being owned by the same individual. It still leaves a thin support base if maintenance stops or urgent fixes are needed.

Release historycaution

The package has four releases, but all activity occurred around its October 2024 launch and there were no releases in the last 12 months. This suggests limited ongoing maintenance, though the package is not deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 23-month gap since the last push. The project may be stable, but there is little current evidence of active support.

Repo toolingcaution

Composer is used as the build tool, which supports reproducible project handling, but no security-scanning tool was detected. For a small library this is a hygiene gap rather than a severe risk.