agashe/sigmaphp-db

Registry deprecationdanger

The package is explicitly marked abandoned on Packagist, with deprecation applying to the package and replacement package sigmaphp/sigmaphp-db named. This is a severe adoption risk despite other healthy indicators.

Repo bus factorcaution

All 3 recent commits came from one contributor, leaving maintenance dependent on a single active individual. Organization backing provides some handoff capacity but does not remove the concentration risk.

Repo commit activitycaution

The repository recorded 3 commits in the last 3 months, showing ongoing activity. The volume is modest, so it provides only limited maintenance assurance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response. The package's tests and active repository provide only partial compensation.