mbunge/php-attributes

Release historydanger

The latest release was published on December 31, 2020, with no releases in the past 12 months despite the package being about 5 years and 9 months old. This materially raises abandonment risk.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last 3 months; its last push was in December 2023, about 2 years and 9 months before collection. The inactive maintenance record is the main adoption concern.

Project backingcaution

The package and repository are consistently owned by the same individual account. That is coherent ownership, but it also indicates a single-person project rather than organization-backed maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, while the build setup itself is appropriate for this PHP package.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's tests, README, and MIT license provide some compensating project structure.