g3yuri/volt-php

Release historydanger

The package has only one release, published about 3 years ago, with no releases in the last 12 months. That gives little evidence of ongoing maintenance for a dependency.

Package file treecaution

The package contains files named client_secret.json and credentials.json alongside application code. Even without proving misuse, including credential-named files is poor release hygiene and raises adoption risk.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package and instead describes a Slim Framework application. This weakens confidence that the published package is clearly maintained from the linked project.

Repo popularitycaution

The repository has zero stars and zero forks, offering no community adoption signal. This is supporting evidence only, so it reinforces the broader lack of assurance rather than deciding the score alone.

Security policycaution

The repository has no security policy. That is a transparency and maintenance gap for a package intended to handle application code and dependencies.