xmon-org/ai-content-bundle

Lifecycle scriptscaution

Composer install and update lifecycle scripts run during dependency operations, adding execution surface for consumers. No provided evidence shows that these scripts are harmful, so this is a limited concern.

Release historycaution

The package made 18 releases in a short burst, but the latest release was about nine months ago and the cadence is not sustained. This raises maintenance uncertainty without proving abandonment.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with roughly nine months since the last observed push. This is the clearest maintenance risk for a package intended for ongoing use.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month and no open work. This may reflect a small or quiet project, but it provides little evidence of ongoing support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a transparency and process gap rather than evidence of unsafe code.