gamboa.martin/template

Dependency profilecaution

The package declares 11 runtime dependencies, including several related packages and PHPUnit; this is a relatively broad dependency surface and increases maintenance exposure, though it is not by itself severe.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single publisher account reflects a genuinely thin project backing rather than normal organization publishing hygiene.

Release historycaution

The package has 91 releases since December 2022, but none in the last 12 months and the latest release was in March 2025. The strong historical cadence is outweighed by the current pause, which raises maintenance risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months measured. This is a concrete sign of currently stalled development, partially offset by the repository's later recorded push date.

Repo toolingcaution

The repository uses Composer, which fits the package ecosystem, but no security-scanning tools were detected. That is a hygiene and transparency gap rather than evidence of an unsafe release.