chungdasilva/phptoken

Release historydanger

The latest release was on April 19, 2019, with no releases in the last 12 months despite the package being over seven years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving maintenance capacity unproven.

Dependency profilecaution

The package declares 10 runtime dependencies, including a full Laravel framework and application-oriented packages, which is unusually broad for a token utility and increases dependency maintenance exposure.

Lifecycle scriptscaution

The package declares four Composer lifecycle scripts, including post-install and post-update hooks. These add install-time behavior that deserves scrutiny, especially in a package with little recent maintenance evidence.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established. This reduces transparency about where the package is maintained.