joefallon/phpcsrf

Maintainerscaution

Only one registry maintainer is listed, so publishing continuity depends on a single person. The repository owner matches the package owner, but no broader maintainer base is shown.

Project backingcaution

The repository is owned by an individual account rather than an organization. That is consistent with a small independent project, but it provides less organizational continuity than established project backing.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but current development activity remains limited.

Repo popularitycaution

The repository has zero stars and forks and one watcher, indicating very limited visible adoption. Popularity is only supporting evidence, so this modestly lowers confidence rather than determining the verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a security-focused library, that is a meaningful maintenance and transparency gap.