diversen/http-send-file

Maintainerscaution

Only one registry maintainer is listed, leaving a thin publishing base and increasing continuity risk. The small, directly matching repository provides some context but does not remove the bus-factor concern.

Release historycaution

The package is mature, with 20 releases since March 2015, but it has had no release in the last 12 months; the latest release was about 15 months ago. This lowers confidence in ongoing maintenance without indicating abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Together with the long release gap, this is evidence of slowed maintenance, though the project is not archived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP library this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, although the package is small and the repository otherwise matches the package.