drupol/php-conventions

Dependency profilecaution

The package declares 12 runtime dependencies for a configuration and tooling package, creating a relatively broad dependency surface compared with its small 14-file artifact.

Project backingcaution

The registry namespace and repository owner match, and the owner is an individual rather than an organization. This provides direct ownership alignment but limited visible backing capacity.

Release historycaution

The package has 40 releases since August 2020, but none in the last 12 months and its latest release was roughly 19 months ago. This indicates a mature history but currently inactive maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the long release gap, this is meaningful evidence of stalled maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. For a package that influences development tooling, this is a modest transparency and hygiene gap.