t3v/t3v_page

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during Composer installation. This is a small supply-chain exposure because dependency installation executes package-defined behavior, though the signal does not show that the script is harmful.

Release historycaution

The package has 37 releases since May 2017, but none in the last 12 months and the latest release was in March 2023. That long release gap materially increases abandonment risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no release for more than three years. This is strong evidence of stalled maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is detected. For a package with install-time behavior and dependencies, that is a meaningful transparency and maintenance gap.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.