barryvdh/elfinder-bundle

Registry deprecationdanger

Packagist marks the entire package abandoned, not just this release, with no clear replacement beyond the same package name. This is a substantial adoption and continuity risk.

Repo bus factorcaution

Recent commits are evenly split between two contributors, avoiding single-contributor concentration, though the active base remains small.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so the artifact-to-source relationship is not clearly established.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

The single workflow completed auditing with no reported findings or dangerous triggers, but both referenced actions are unpinned and the workflow lacks a top-level permissions block.