composer-phar/phpcbf

Release historycaution

The package has 80 releases and three releases in the last 12 months, but the latest release was about 11 months ago. This suggests slower current delivery without showing abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the older latest release, this is a meaningful maintenance concern.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. For a PHAR distribution this weakens visible security and maintenance hygiene, though it is not evidence of unsafe behavior.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, not a severe dependency risk on its own.