tawk/url-utils

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, adding avoidable installation-time behavior for consumers.

Release historycaution

Only four releases were published, all within a few days in September 2024, with no release in nearly two years. This materially weakens confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating that source maintenance has currently stalled.

Repo package mentioncaution

The repository name does not exactly match the package name and its README does not mention the package, so the linkage is less transparent than expected. The name difference alone could be normal for a sub-package, but the missing README mention adds caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest project-hygiene gap.