wyrihaximus/react-opportunistic-tls

Dependency profilecaution

Seven runtime dependencies create a meaningful transitive maintenance surface for this small library, though the listed dependencies are directly relevant to its ReactPHP networking role.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts add install-time behavior and therefore some supply-chain exposure, although this signal alone does not show that the scripts are unsafe.

Project backingcaution

The repository is maintained under an individual user account rather than an organization, so the small observed maintenance base carries more weight than it would for an organization-backed project.

Release historycaution

The package is about 14 months old with three releases and two releases in the last 12 months; the roughly four-month median interval indicates a modest rather than highly active cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a material sign of a thin or paused maintenance base; recent pull-request activity partly offsets but does not remove it.