gilbitron/easycsrf

Release historycaution

The package has seven releases since February 2015, but none in the last 12 months and its latest release was in December 2021. This long period without a release materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with maintenance having stopped after December 2021. This is the strongest ongoing-abandonment concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with three issues still open. The quiet issue tracker provides no evidence of active support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a CSRF protection library, the absence reduces disclosure transparency and raises maintenance concerns, although tests and documentation provide some compensation.