fanout/pubcontrol

Registry deprecationdanger

Packagist marks the entire package abandoned and names fanout/grip as its replacement, which is a direct warning against taking a new dependency on this release.

Release historydanger

The package has had no releases in roughly nine years despite being over 11 years old, showing that maintenance and release activity have stopped.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long period since its last update.

Repository archiveddanger

The linked repository is archived, with its last push in August 2017; archived source is a severe abandonment risk for a dependency.

Repo toolingcaution

Composer is used for builds, but the repository has no security scanning tools; this is a minor hygiene gap that matters less than the archived project.