iluckhack/xhprof-buggregator-bundle

Release historycaution

This is the package's only release, published about 2 years and 6 months ago, with no releases in the last 12 months. That leaves limited evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with a project that has not changed since its March 2024 release. This weakens confidence in future fixes.

Repo toolingcaution

Composer is used for the build, but no repository security-scanning tools were detected. That is a maintenance and transparency gap, though not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small development-time profiling integration this is a modest transparency gap, but it does not outweigh the available tests and documentation.

Version stabilitycaution

The release is version 0.1.0 rather than a stable major release, so compatibility expectations are limited. It is not marked as a prerelease, which partly offsets the risk.