djsharman/state

Dependency profilecaution

The package declares six runtime dependencies, including PHPUnit-related packages and a custom library, which increases compatibility and maintenance burden for an otherwise old release.

Licensecaution

No license is declared, and neither the package nor the linked repository contains a license file. That creates a material legal and adoption concern for downstream users.

Release historycaution

The package has only one release, published in October 2015, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency that may need ongoing compatibility work.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates little current maintenance capacity.

Repo toolingcaution

Composer and Phing are used for builds, showing some project structure, but no security scanning tools are present. This is a minor transparency and hygiene gap.