pi/core

Dependency profilecaution

The package declares 66 runtime dependencies, including many platform extensions and framework components. That creates a substantial upgrade, compatibility, and transitive-maintenance burden for adopters.

Package scaffoldingcaution

The artifact includes a README, but it is only six characters long and gives consumers almost no integration guidance. The absence of tests and a changelog in the published package is normal packaging practice and is not treated as a gap.

Release historycaution

The package has only four releases over about four years, with no releases in the last 12 months and a median interval of about 406 days. This indicates a slow maintenance cadence, though the repository was pushed more recently.

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months. This is a meaningful maintenance concern, although the repository's January 2026 push provides some counterevidence against complete abandonment.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. For a package described as an application engine with security-related components, the missing scanning coverage is a hygiene concern.