iceqi/avata-php

Release historydanger

Only two releases were published, both in August 2022, with no release in the last four years. This is strong evidence of abandonment for a package developers may need to rely on for fixes.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source-package relationship is less transparent and warrants caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This weakens automated oversight without indicating a direct dependency risk by itself.

Security policycaution

The repository has no security policy. That is a transparency gap, although the package's small scope and simple dependency profile limit how much weight this carries.