flatphp/filter

Release historydanger

The package has had no release in roughly nine years and none in the last 12 months, despite only three releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap. No provided signal shows recent maintenance to compensate.

Repo popularitycaution

The repository has zero stars, forks, and watchers, offering no supporting evidence of community adoption or external maintenance. Popularity is only supporting evidence, so this remains a caution rather than the main concern.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap, not a standalone reason to reject this small package.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This adds a modest concern alongside the much larger maintenance risk.