jcchavezs/zipkin-symfony

Registry deprecationdanger

Packagist marks the entire package as abandoned and names zipkin-instrumentation-symfony as its replacement. This is a major adoption risk even though the release itself is not withdrawn.

Release historydanger

The package has 33 releases since January 2018, but none in the last 12 months and its latest release was in December 2021. That long release gap indicates likely abandonment.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, with its last push in October 2022. This supports the abandonment concern rather than offsetting it.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. Although this can occur with related repositories, the mismatch reduces source transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings, but all seven action references are unpinned. That leaves build inputs exposed to future upstream changes.