damess/expressive-session-middleware

Release historydanger

The package has only 3 releases, with none in the last 12 months and the latest published over 10 years ago. This is strong evidence of low maintenance, despite the stable release history.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, consistent with repository activity having stopped about 9 years ago. This materially raises abandonment and compatibility risk.

Project backingcaution

The source repository is owned by an individual user rather than an organization, so the single registry maintainer does not have organizational backing to compensate for the inactive project.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no open issues or pull requests. Combined with the old repository, this provides no evidence of current support.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanner is a hygiene gap, not a severe risk, and the package's older maintenance profile remains the larger concern.