jma/gaufrette-remote-adapter

Release historydanger

There has been only one release, 0.0.1, published about 12 years ago, with no releases in the last 12 months. This is strong evidence of an abandoned or unfinished dependency.

Repo commit activitydanger

The repository has zero commits and zero active maintainers in the last three months, and its last push was about 12 years ago. This is the clearest evidence that maintenance has stopped.

Dependency profilecaution

Seven runtime dependencies, including framework, security, filesystem, and HTTP components, create a relatively broad dependency surface for a 0.0.1 package. The signal does not show that these dependencies are unsafe, so this is a maintenance burden rather than a severe risk.

Repo popularitycaution

The repository has zero stars and forks and one watcher. This indicates very limited adoption and provides little community support to compensate for the absence of maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. For a package handling remote files, that is a meaningful hygiene gap, though it is secondary to the inactivity evidence.