tmd/auto-git-pull

Its README is clear and the dependency set is small, while install-time scripts require careful deployment permissions. The repository is not archived and matches the package, but the evidence does not support relying on ongoing fixes.

Latest 2.1.2

Packagist

30%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in December 2015, nearly 11 years ago, and there have been no releases in the last 12 months. The package has a reasonable historical release cadence, but its current inactivity is a major maintenance concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Lifecycle scripts

The package runs post-install and post-update Composer scripts, including the documented permission change for its deployment shell script. This is operationally sensitive and deserves caution even though the scripts are part of the package's stated setup.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with three issues still open. This supports the conclusion that the project is inactive, though the small issue backlog is not severe by itself.

Security policy

The linked repository has no security policy. For a package that exposes deployment functionality and runs install-time scripts, this is a meaningful transparency gap.