wyrihaximus/react-psr-3-stdio

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These add install-time behavior that should be understood before adoption, although the signal gives no evidence that the scripts are unsafe.

Release historycaution

The package has existed since June 2017 and released version 4.0.0 in the last 12 months, but only one release in that period and a median interval of about 752 days indicate a slow cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Recent merged pull requests and the latest repository push partly offset this, but the recent commit gap lowers maintenance confidence.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected. That is a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting expectations unspecified.