janus-ssp/php-x509-validate

Release historydanger

The latest release was about 9 years ago, with no releases in the past 12 months. This is strong evidence of abandonment for a package a developer would newly adopt.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the past 3 months, and its last push was in 2018. The long period without observed maintenance materially increases abandonment risk.

Licensecaution

The artifact and repository have no recognized license declaration or license file. Although the README mentions Apache 2.0, that is not supported by the collected license evidence, leaving licensing transparency unresolved.

Repo toolingcaution

Composer build tooling is present, which supports ordinary package maintenance, but no security scanning tools were detected. The missing security automation is a modest hygiene concern.

Security policycaution

The repository has no security policy. This is a transparency gap, especially for a package that validates certificates, though it is less serious than the prolonged lack of maintenance.