marceloeatworld/runpod-serverless-php

Maintainerscaution

One registry account publishes the package, which creates some bus-factor concern. The linked repository is owned by the same individual, so this is consistent ownership rather than an unexplained publishing arrangement.

Release historycaution

The package has only two releases over about 22 months, with one release in the last 12 months and nearly 16 months between releases. This indicates a thin release history and lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the sparse release history, this is a meaningful sign of slowing maintenance, though not abandonment because the repository is unarchived and recently had a push.

Repo toolingcaution

The repository uses Composer, confirming a standard build tool, but it has no security-scanning tooling. The missing scanning is a maintenance and transparency gap, though no dangerous workflow was detected.

Security policycaution

The repository has no published security policy. For a client library handling API authentication, this reduces transparency about vulnerability reporting and response expectations.