wikimedia/lucene-explain-parser

Name lookalikedanger

The package is flagged as borrowing the identity of the much more established wikimedia/composer-merge-plugin, with borrows_lookalike_identity true. Although artifact overlap is zero, this still creates a substantial risk that consumers select the wrong package.

Release historycaution

Only two releases exist, with no release in more than four years and no releases in the last 12 months. That is a meaningful maintenance and abandonment concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The non-archived status and recent push timestamp provide some continuity, but they do not show ongoing development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is a positive foundation, while the missing scanning is a modest hygiene gap.

Security policycaution

The repository has no published security policy. This weakens transparency and gives consumers no documented process for reporting or handling vulnerabilities.