medz/phpwind

Release historydanger

The package has 14 releases over about 10 years, but its latest registry release was about 7 years ago and it had no releases in the last 12 months. That strongly indicates the published dependency is stale.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no registry releases for about 7 years, this is strong evidence of maintenance risk.

Repo package mentiondanger

The linked repository is named fans rather than medz/phpwind and its README does not mention the package. That raises a material concern that the repository may not actually be the package's source.

Dependency profilecaution

The package declares eight runtime dependencies, including a framework, search client, SMS provider, and JWT authentication package. This is a substantial dependency surface for an application and increases maintenance exposure, but it is not unusually large on its own.

Licensecaution

The manifest declares Apache-2.0, while the repository license file is detected as MIT. That mismatch creates licensing uncertainty even though both sources indicate that licensing information exists.