jamesbrooks/php-clamp

Release historycaution

This is a six-year-old package with only one release and no releases in the last 12 months, which is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with a project that has been inactive for several years.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is configured. For this small package that is a hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, but the package's small scope keeps the impact limited.

Version stabilitycaution

The assessed version is not a stable major release, although it is not marked as a prerelease; this modestly limits maturity evidence.