agentcoop/phpcrystal

Release historydanger

The package has only one release, published about 8 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a framework extension, despite the absence of registry deprecation.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with its last push being about 8 years ago. This is a severe abandonment signal for a package intended to underpin applications.

Lifecycle scriptscaution

The package runs post-autoload-dump, post-create-project-cmd, and post-root-package-install scripts. These increase installation complexity and the amount of package code executed during setup, creating a modest dependency risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. That weakens transparency around dependency and source risks, though it is secondary to the clear inactivity.

Security policycaution

The repository has no security policy. This reduces clarity about vulnerability reporting and response expectations, adding a transparency gap for a framework extension.