rogelio1502/ef-orchid-package

Release historydanger

The latest release was over three years ago, with no releases in the last 12 months and only three releases overall. The very short early release interval does not compensate for the prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and indicating little current maintenance capacity.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing the amount of package code executed during dependency operations. No provided signal shows these scripts are unsafe, so this is a maintenance and supply-chain caution rather than a verdict on the package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves an avoidable gap in ongoing dependency and source checks for a package that runs lifecycle scripts.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled. This matters more alongside the absence of recent maintenance activity.