trustedreviews/enhanced-post-cache

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding execution during dependency operations. This is a maintenance and transparency concern even though the signal does not establish malicious behavior.

Release historycaution

The latest release was about 5 years and 8 months ago, with no releases in the last 12 months. Seven total releases show some history, but the prolonged pause is a substantial abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and indicating no recent maintenance capacity.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month; two open pull requests provide no evidence of active resolution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves an avoidable gap in ongoing dependency and code-risk monitoring.