verdigado/calendarize-external

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation. This adds execution complexity, but the signal alone does not show harmful behavior or make the release unfit.

Release historycaution

The package has made no registry release in about 2 years and 10 months, with zero releases in the last 12 months. This is the strongest sign of possible abandonment, although the repository was recently pushed.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools are reported. That is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no SECURITY.md or other reported security policy. This weakens vulnerability-reporting transparency, though it is not by itself a severe dependency risk.

Version stabilitycaution

Version 0.1.2 is not a prerelease, but its 0.x major version indicates the API may still be less mature and more subject to breaking change than a 1.x package.