yangweijie/think-runtime

Release historydanger

The package is about 15 months old, but its latest registry release was over 15 months ago and it had no releases in the last 12 months. The five releases were clustered within about a day, leaving no evidence of ongoing release maintenance.

Lifecycle scriptscaution

The package declares a post-install command, so installation performs additional package-defined work beyond extracting files. That deserves review because install-time scripts increase dependency installation risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful abandonment concern, although the repository is not archived and the release includes supporting documentation and tests.

Repo issue activitycaution

There were two open issues and no issue or pull-request activity in the last month. This adds limited evidence of low ongoing project activity but is weaker than the lack of recent commits.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing security automation modestly reduces assurance for a package that handles application runtime infrastructure.