composer-unused/contracts

Name lookalikedanger

The package borrows the identity of the much more established composer/ca-bundle, with borrows_lookalike_identity true. Despite zero artifact overlap, consumers may most likely have intended the lookalike package.

Release historycaution

The package has only 3 releases and none in the last 12 months; its latest release was in March 2023. That limited and stale cadence raises maintenance risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package having been inactive since March 2023.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, although the package's small contract-only scope limits its practical weight.