fid/php

Release historydanger

This package has only one release, published about 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository has had no commits or active maintainers in the last 3 months, and its last push was in July 2016. The organization backing does not compensate for the absence of observed maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is present. This is a modest transparency and maintenance-hygiene gap, not evidence that the package is unsafe by itself.

Repository archivedcaution

The repository is not marked archived, but its last push was in July 2016; the observed inactivity still indicates substantial abandonment risk.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency, although the package's long-term inactivity is the more significant concern.