alfredluck/golivephpsdk

Repo commit activitydanger

There have been no commits and no active maintainers in the last three months, consistent with the package's multi-year release silence. This materially raises abandonment risk.

Dependency profilecaution

Sixteen runtime dependencies create a relatively broad maintenance surface for a small package. The signal does not show that any dependency is abandoned or unsafe, so this is a modest concern rather than a severe one.

Maintainerscaution

Only one registry account can publish the package, leaving little visible publishing redundancy. The linked repository is also owned by that individual, so there is no organizational backing shown to offset the thin maintainer base.

Package scaffoldingcaution

The artifact has a README and changelog, and the repository has tests and changelog support; release notes also document this version. The README's usage section remains TODO, limiting consumer guidance.

Project backingcaution

The registry namespace and repository are owned by the same individual account, and no organization backing is shown. This is consistent ownership but provides limited continuity if that maintainer stops work.