biswadeep/form-tool

Registry deprecationdanger

Packagist marks the entire package as abandoned and names iam-deep/form-tool as its replacement. This is a severe adoption risk even though the release itself is recent.

Repo bus factorcaution

All 36 recent commits came from one contributor, leaving maintenance dependent on a single person. The repository is user-owned rather than organization-backed, so this concentration is a genuine continuity concern.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. This is a transparency and maintenance gap, though it is less significant than the package-level deprecation.

Security policycaution

The repository has no security policy, so users have no documented reporting or response process. This lowers transparency but is secondary to the explicit abandonment notice.