fishfin/php-valigator

Release historydanger

The latest release was over five years ago, with no releases in the last 12 months and only three releases since 2017. This is strong evidence of abandonment risk despite the package remaining registered.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Maintainerscaution

Only one registry publishing account is listed, leaving little visible publishing redundancy. This is a meaningful resilience concern for a small, inactive project.

Repo popularitycaution

The repository has one star and one fork, so there is little community evidence to compensate for the lack of recent maintainer activity.

Repo toolingcaution

Composer is used for the build, which supports reproducible package structure, but no security-scanning tool is configured. The missing scanning is a hygiene gap rather than evidence of a vulnerability.