jolicode/harvest-php-api

Name lookalikedanger

The package is reported to borrow the identity of jolicode/php-os-helper and has a much smaller monthly download count, although artifact overlap is very low. This creates a serious risk that consumers may select the wrong package.

Package scaffoldingdanger

The release notes explicitly call v9.1.0 the final release and state that there will be no further updates, bug fixes, or security fixes. Tests, a changelog, and release notes improve transparency but do not compensate for abandonment.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the stated end of maintenance. Earlier release activity does not provide ongoing support for future API changes.

Release historycaution

The project has 30 releases over roughly 7 years, including 3 in the last 12 months, showing substantial prior maintenance. That history is outweighed for a new dependency by the final-release status.

Security policycaution

The repository has no security policy. That is a transparency gap, and it is more consequential here because the release documentation states that future security fixes will not be provided.