sudhaus7/sudhaus7-wizard-container

Lifecycle scriptscaution

The package defines pre-autoload-dump and post-autoload-dump scripts, which add install-time behavior that dependents should understand and constrain. No provided signal shows these scripts are unsafe, so this is a modest concern rather than a severe risk.

Release historycaution

This is the package's only release, published about two years and four months ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, and the last recorded push was about 19 months ago. This is meaningful evidence of slowing or stalled maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces assurance without proving a dependency problem.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it does not by itself make the release unfit.