carnage/zendfony-cli

Release historydanger

The latest release was in June 2019, with no releases in the last 12 months and only four releases overall. This is strong evidence of abandonment for a package intended as an ongoing CLI dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, consistent with the long gap since its latest release. No provided maintenance signal compensates for this lack of recent activity.

Repo package mentioncaution

The linked repository name does not match the package name, and the README mention status is unknown. The mismatch creates some uncertainty about repository ownership and package provenance, though it is not conclusive by itself.

Repo toolingcaution

Composer build tooling is present, which supports reproducible project structure, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

No repository security policy was found. For a small, inactive package this leaves no documented channel or process for handling vulnerabilities.