dgac/nmb2b-phpclient

Release historycaution

The package has 15 releases since May 2018, but none in the last 12 months and the latest registry release was in August 2023. This is a meaningful maintenance concern despite the earlier regular cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent repository push provides some contrary evidence, but it does not demonstrate ongoing development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The organization backing provides some context but does not replace a published policy.

Version stabilitycaution

The assessed release is in the 0.x series, and the registry reports v0.4.2 as the latest version while this assessment targets v0.5.1, creating some version-history uncertainty. It is not marked prerelease, which partly offsets the concern.