samsonasik/ci4-react

Lifecycle scriptscaution

A post-update command runs during Composer updates, adding install-time behavior that deserves attention, but this is not by itself a severe dependency risk.

Maintainerscaution

Only one registry account can publish the package. The matching user-owned repository provides some continuity, but the small publisher base increases bus-factor risk.

Project backingcaution

The package and repository are owned by the same individual account, so the source relationship is clear, but there is no organization backing shown.

Release historycaution

The project has released 16 versions over roughly six years and published one release in the last 12 months, showing ongoing but relatively infrequent delivery.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, indicating a recent pause in development despite the January 2026 push.