ezimuel/php-secure-session

Release historydanger

The package has had 3 releases since January 2017, with no release in more than 8 years and none in the last 12 months. This is a substantial abandonment concern for a security-related library.

Repo commit activitydanger

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the long gap since the last push. This materially increases the risk that defects will remain unaddressed.

Licensecaution

The artifact includes a LICENSE file and the repository also has one, but the declared BSD-3-Clause license does not match the detected MIT license. The release is licensed, but the mismatch reduces clarity.

Project backingcaution

The registry namespace and repository owner match, and the owner is an individual rather than an organization. This is consistent ownership evidence, but it also indicates a limited visible backing structure.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. For an encryption and authentication library, the missing security tooling is a meaningful hygiene gap.