koansu/dependency-injection

Release historydanger

This is the package's only release, published nearly four years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance.

Package scaffoldingcaution

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but a PHP library without consumer documentation is a real transparency and integration gap.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little independent evidence of adoption or community support. Popularity is supporting evidence, so this reinforces rather than determines the assessment.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. This is a modest supply-chain hygiene gap, not evidence that the package is unsafe.