dseguy/php-gremlin

Maintainerscaution

Only one registry account has publish access. Because the project is backed by an individual account and no broader organization backing is shown, this leaves a thin publishing and support base.

Release historycaution

This is the package's first release, published today, so there is no release cadence or history demonstrating sustained maintenance. Its linked repository was also updated today, which is consistent with a newly launched project rather than abandonment.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months, although it was created or updated today and the package is brand new. This provides no evidence of an established maintenance cadence yet.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. For a new library this is a modest repository-hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency for a client library, though it does not by itself indicate unsafe code.