tungtu/puphpeteer

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 15-month release gap. This is the clearest abandonment risk in the available evidence.

Lifecycle scriptscaution

A post-install command runs during installation. Install-time scripts increase dependency-installation complexity and deserve caution even though this signal alone does not establish malicious behavior.

Maintainerscaution

Only one account has registry publish access. That is a limited publishing base, and the concern is stronger because observed repository activity is also absent.

Project backingcaution

The repository is owned by the same individual user as the registry namespace. This confirms ownership alignment but provides less organizational continuity than a backed project.

Release historycaution

The package has five releases, but none in the last 12 months; its latest release was about 15 months ago. This indicates a meaningful maintenance slowdown despite a previously regular median interval of about 10 days.