lerko/p-hero

Dependency profilecaution

Seven runtime dependencies make adoption more exposed to dependency compatibility and maintenance changes, though the profile is not by itself evidence of an unhealthy release.

Release historycaution

The latest release was published over eight years ago, with no releases in the last 12 months. This is a substantial maintenance concern, although the linked repository was pushed more recently.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. This is consistent with a quiet project but does not independently prove abandonment.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are reported. The missing scanning is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.