mediawiki/php-session-serializer

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no distinct replacement identified. Package-wide deprecation is a severe adoption risk even though the repository remains active.

Repo commit activitycaution

There were no commits in the last three months and no active maintainers during that period. This conflicts with the recent push and suggests limited recent development activity, but does not outweigh the package-wide deprecation by itself.

Repo toolingcaution

The repository uses Composer for builds but reports no security-scanning tools. Build tooling is present; the missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented.