shimabox/screru

Release historydanger

The latest release was published in June 2020, with no releases in the following six years and a total of only six releases. This is strong evidence of abandonment for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but it shows no recent maintenance.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing installation complexity and the amount of package behavior that must be trusted. No other provided signal shows these scripts are unsafe.

Maintainerscaution

Only one registry account can publish releases, leaving a thin publishing base. The linked repository is owned by the same individual, so there is no visible organizational backing to compensate.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling security issues. This compounds the risk of an inactive project, although it is not evidence of malicious behavior.