pi/user

Dependency profilecaution

The package declares 66 runtime dependencies and no dev dependencies, including many framework components and platform extensions. That broad runtime footprint increases compatibility, deployment, and upgrade burden.

Lifecycle scriptscaution

Post-install and post-update commands run during Composer operations, which adds execution and upgrade complexity for consumers. No provided signal compensates for that operational burden.

Release historycaution

The latest registry release was nearly two years before collection, and there were no releases in the preceding 12 months. Earlier releases were relatively close together, but the current pause raises maintenance concern.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. The repository's recent push date is a compensating sign of availability, but the measured development pause still lowers confidence in active maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe on its own.