coderatio/phpfirebase

Release historydanger

The package has had only two releases, both around November 2018, with no release in more than seven years. This strongly indicates abandonment despite the absence of registry deprecation.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and leaving no evidence of current maintenance.

Package file treecaution

The seven-file artifact includes a file under src/secret named like a Firebase service-account key. Even without confirming its contents, shipping a credential-shaped file is a meaningful packaging and transparency concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap that adds concern alongside the package's long maintenance outage.

Repository archivedcaution

The repository is not marked archived, which is a modest positive, but its last push was in December 2018 and does not offset the prolonged inactivity.