aleron75/webgriffe_tph-pro

Release historydanger

The registry shows only one release, published in November 2016, with no releases in roughly nine years. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in October 2017. The long-term lack of activity is not compensated by any newer release evidence.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. That weakens confidence that the repository is clearly maintained as this package's source.

Repo toolingcaution

Composer is used as a build tool, which is appropriate, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk on its own.

Security policycaution

The repository has no security policy. For an old package with no recent maintenance activity, this leaves vulnerability reporting and response practices unclear.