emergento/ponyu

Release historydanger

The package has only one release, published nearly four years ago, with no releases in the last 12 months. That strongly limits evidence of sustained maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since its last update and raising abandonment risk.

Package file treecaution

Both the package and repository contain only .gitignore and composer.json. This provides very little implementation or documentation transparency for a package with eight runtime dependencies.

Package scaffoldingcaution

The artifact has no README, while tests and a changelog are not expected in every published package; the exact-version GitHub release notes are a small positive, but they do not offset the minimal package contents.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tooling is present. The missing scanner modestly reduces maintenance confidence.