deefour/producer

Release historydanger

The package has had no release in over 10 years, despite six historical releases. That long period without updates is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release hiatus. No provided signal shows compensating current maintenance.

Maintainerscaution

Only one registry publishing account is listed, which is a thin publishing base for a package with no recent release or commit activity. This reinforces the maintenance concern, though registry access alone does not prove who actively maintains the code.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. For a small library this is a minor transparency gap, but it provides no documented process for handling vulnerabilities.