wyrihaximus/react-stream-json

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These scripts are not inherently unsafe, but they add install-time behavior that merits attention when the release is already old.

Release historycaution

The package has 10 releases since July 2017, but none in the last 12 months and the latest registry release was over three years ago. This is a meaningful freshness concern despite the long project history.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month window. This conflicts with the recent pull-request activity and lowers confidence in near-term maintenance capacity.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence of abandonment by itself.

Security policycaution

No security policy was found in the linked repository, leaving vulnerability reporting and response expectations undocumented.