yaoshanliang/ucenter

Release historydanger

The package has only two releases, with the latest published in July 2016 and none in the last 12 months. This long release gap materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package's long release inactivity and weakening confidence in ongoing maintenance.

Dependency profilecaution

The package declares 12 runtime dependencies, including authentication, permissions, messaging, and framework components. This is a substantial dependency surface for an old application and increases maintenance burden.

Lifecycle scriptscaution

The package runs post-create, post-install, and post-update Composer scripts. These add installation-time behavior that deserves review, though lifecycle scripts alone do not establish a severe dependency risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported. The missing scanning reduces maintenance assurance, though it is secondary to the demonstrated lack of recent activity.