carlosas/phpat

Registry deprecationdanger

The package is explicitly marked abandoned at the registry and has a replacement package, which is a major dependency risk even though the repository remains active.

Package scaffoldingcaution

The published artifact lacks a README, which is a real usability and transparency gap for a library, but the repository contains tests, a changelog, and GitHub release support.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance highly concentrated and increasing continuity risk.

Repo commit activitycaution

The repository received three commits in the last three months, so activity has not stopped, but the volume is modest and should be viewed alongside the abandonment flag.