voidagency/vactory-project

Release historydanger

The package has only two releases, with none in the last five years and the latest published in February 2021. This is strong evidence of abandonment risk despite the stable release format.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited ongoing maintenance capacity.

Licensecaution

The package declares GPL-2.0-or-later and includes a license file, but artifact license detection also found MIT, Apache-2.0, and BSD-3-Clause text from bundled components. The mixed footprint warrants checking which license applies to the package and its included assets.

Lifecycle scriptscaution

The package runs six Composer install and update lifecycle scripts, including pre- and post-install hooks. These increase installation complexity and the amount of package code executed during dependency operations.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for a project template with substantial bundled content.