tantek/cassis

Lifecycle scriptscaution

A post-update-cmd Composer lifecycle script runs during dependency updates. This is a supply-chain and installation-surface consideration, but one script alone is not a severe risk.

Release historycaution

The package has six releases since June 2013, but none in the last 12 months and the latest registry release was March 10, 2023. This indicates a materially slowed release cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent repository push helps, but does not demonstrate sustained maintenance activity.

Repo issue activitycaution

There are 16 open issues, with no new or closed issues and no pull requests in the last month. This suggests limited current project activity, though it is not evidence of abandonment by itself.

Repo toolingcaution

The repository uses Composer, which provides build tooling, but no security scanning tools were detected. That leaves a modest transparency and maintenance gap.