marko/broadcasting-amphp

Dependency profilecaution

The release declares 15 runtime dependencies across the framework, HTTP, authentication, logging, and pub/sub layers. This is plausible for the package's server role but increases dependency maintenance exposure.

Release historycaution

The package has only three releases and was first published on the assessment date, so there is no established release or maintenance history yet.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months, but the repository was created or updated only hours before assessment. This establishes no sustained maintenance record rather than proving abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy. For a package serving authenticated SSE connections, this leaves vulnerability-reporting guidance unspecified.