bartfeenstra/dependency-retriever-symfony-bridge

Release historydanger

The package has only two releases, both in March 2016, and none in the last 12 months; the latest release was over ten years ago. This strongly indicates abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the unchanged release history and leaving no evidence of current maintenance.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher. Low popularity is not decisive by itself, but it provides little supporting evidence of ongoing adoption or community oversight.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The missing scanning is a transparency gap, though it is secondary to the package's much older maintenance record.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is less significant than the demonstrated lack of maintenance.