klapuch/csrf

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. Package-level deprecation is a severe adoption risk rather than a cosmetic metadata gap.

Release historydanger

The latest release was in September 2017, with no releases in the last 12 months despite the package being nearly ten years old. This indicates prolonged abandonment.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its archived state. There is no observed maintenance capacity for new fixes.

Repository archiveddanger

The linked repository is archived and was last pushed in February 2018. An archived source project is a strong indication that maintenance has ended.

Licensecaution

No license is declared and no license file was detected in the package or repository. This creates a real legal and transparency gap for dependency adoption.