peehaa/feedr

Release historydanger

The package has only one release, published about 8 years ago, with none in the last 12 months. This is strong evidence of abandonment for a dependency released as an initial version.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. The linked repository is still present, but there is no observed recent maintenance.

Lifecycle scriptscaution

The package runs post-install and post-update scripts, adding code execution and maintenance surface during dependency operations. Such hooks may be expected for this application, but they warrant caution when maintenance has stopped.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the code is unsafe.

Security policycaution

The repository has no security policy. For a web application package with database, Redis, GitHub, and server components, this reduces transparency about how security issues are handled.