swow-cloud/openai-swow

Release historydanger

This is the only release, published about 3 years and 6 months ago, with no releases in the last 12 months. That strongly suggests abandonment risk despite the repository still being available.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. The signal does not show that it is harmful, but install hooks increase maintenance and supply-chain exposure.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is not required for health, but this provides no supporting evidence of adoption or community oversight.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. That leaves a meaningful transparency and detection gap for a package making API requests.

Security policycaution

The repository has no security policy. This weakens the project's process for receiving and documenting vulnerability reports.