endroid/cm-sms-bundle

Registry deprecationdanger

The package is explicitly abandoned on Packagist, with symfony/notifier named as its replacement; this directly raises adoption and support risk.

Release historydanger

The latest release was in April 2020, and there were no releases in the following 12 months of the observed history. That long release gap indicates substantial abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, providing no evidence of current maintenance capacity.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than the package's abandonment status.

Workflow auditcaution

The single analyzed workflow has no top-level permissions block and all 3 action references are unpinned. No dangerous triggers, untrusted checkouts, script injection, or audit findings were reported, so this is a limited hygiene concern.