danmatthews/phpgpx

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe warning for a new dependency.

Release historydanger

The package has only one release, published about nine years ago, with no releases in the last 12 months. This strongly indicates abandonment risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with its last push being about eight years ago. The linked repository being unarchived does not compensate for the lack of recent activity.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little additional confidence in long-term maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. This is a modest hygiene gap and does not by itself establish a security problem.