wz-sistemas/cobranca

Release historydanger

The latest release was in August 2016, with no releases in the last 12 months. This long period without registry activity is strong evidence of abandonment risk.

Dependency profilecaution

The package declares 12 runtime dependencies across Symfony, Doctrine, Twig, and related bundles. This broad legacy framework stack increases dependency maintenance burden, with no provided evidence of current compatibility.

Licensecaution

The manifest declares MIT and the artifact contains license files, but those files identify several licenses, including MPL-1.1, GPL-2.0, and LGPL-2.1. The mixed licensing makes the package’s overall licensing scope less clear.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These add installation complexity and require trust in package-time behavior, though they are not by themselves evidence of maliciousness.

Package file treecaution

The artifact is substantial and includes application code, tests, documentation, and bundled frontend assets, showing that this is a complete application or bundle rather than an empty scaffold. The large bundled tree also increases maintenance and licensing complexity.