lochmueller/perfectlightbox

Release historycaution

The package has seven releases since June 2016, but none in the last 12 months and the latest release was in October 2018. This long release gap is a meaningful maintenance concern despite the historically regular earlier cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the lack of registry releases since 2018, this suggests limited current maintenance capacity.

Repo popularitycaution

The repository has only 3 stars and 10 forks, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a decisive health measure, so this modestly limits confidence but is not independently a major risk.

Repo toolingcaution

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools are configured. The absence of scanning is a hygiene gap, though it is less significant for dependency health than the inactive release and commit history.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, but it is not by itself evidence that the package is unsafe to depend on.