bfeaver/holiday

Release historycaution

This is the package's only release, published about 12 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency whose behavior may need ongoing compatibility maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, while the repository was last pushed about 11 years ago. This confirms that maintenance has effectively stopped.

Repo popularitycaution

The repository has only 3 stars, 1 fork, and 1 watcher. Low adoption is supporting evidence of limited project maturity, though popularity alone is not decisive.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured. For this small package that is a hygiene gap rather than a severe supply-chain risk.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This weakens transparency, although the package's small scope limits the impact.