jlis/php-prometheus

Release historydanger

The package has had only two releases, both in September 2018, with no releases in roughly eight years. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since September 2018.

Maintainerscaution

Only one registry maintainer is listed, leaving little visible publishing redundancy. The repository is user-owned rather than organization-backed, so there is no provided compensating backing signal.

Repo popularitycaution

The repository has one star, one fork, and no watchers, providing little supporting evidence of broad review or community resilience. Popularity is supporting evidence rather than the primary concern here.

Security policycaution

The linked repository has no security policy, which makes vulnerability reporting and response expectations less transparent. This adds a hygiene concern alongside the much stronger maintenance concerns.