remorhaz/int-rangesets

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during Composer operations, adding avoidable installation-time behavior that deserves review before adoption.

Release historycaution

The latest release was published in February 2024, with no releases in the following 12 months recorded and a median release interval of about 257 days. This indicates a meaningful maintenance slowdown for a still-pre-1.0 package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is evidence of weak current maintenance capacity.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious for this small library than for a security-sensitive component.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, and no high- or medium-confidence findings, but all five action references are unpinned. That weakens build reproducibility and supply-chain hygiene without indicating an immediate severe risk.