sweetchuck/robo-nvm

Release historydanger

Only two releases exist, with the latest published on December 26, 2020 and none in the following years. This is a substantial freshness concern for a dependency, although the linked repository is not archived.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during Composer operations, increasing installation and update behavior that consumers must inspect and trust.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently, the observed commit activity still indicates limited recent development evidence.

Repo toolingcaution

Composer and Robo are used for builds, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency but is not severe enough to make the release unfit by itself.