joshkulesza/php-flagr

Licensedanger

The manifest declares the package proprietary, and no license file was detected in either the artifact or repository. This creates a material legal and transparency concern for an open-source dependency.

Release historydanger

The package has only three releases, all clustered in April 2021, with no release in more than five years. That strongly suggests the dependency is no longer maintained.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating little current maintenance capacity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. This is a hygiene gap and provides little evidence of ongoing dependency or code-security oversight.

Security policycaution

The repository has no security policy. For a dependency that has already shown prolonged inactivity, this leaves vulnerability reporting and response expectations unclear.