vysokeskoly/utils-bundle

Dependency profilecaution

The release declares 20 runtime dependencies, including several Symfony and HTTP components. This is a substantial dependency surface and increases the maintenance burden, but it is not inherently unhealthy.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These add installation-time behavior that consumers should inspect, though the signal does not establish that the scripts are unsafe.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the latest three months. This is a meaningful maintenance concern, although the recent release history shows activity over the broader period.

Repo popularitycaution

The repository has no stars or forks and one watcher. This indicates limited external adoption, but popularity is supporting evidence only and does not outweigh the package's release history and organization backing.

Repo toolingcaution

The repository uses Composer for builds, but no security-scanning tool was detected. The missing scanning is a modest transparency and maintenance gap, not evidence of a specific vulnerability.