hhzbeads/ini

Release historydanger

Only two releases exist, both from April 2018, with no release in more than eight years. That is strong evidence of abandonment risk for a dependency, despite the stable version profile.

Licensecaution

The package declares no license, includes no license file, and the repository also has no license file. This creates a concrete legal and adoption barrier.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small package, but these figures provide no supporting evidence of community adoption or oversight.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy. For a small, inactive package this adds to the lack of maintenance and vulnerability-reporting transparency.