metadrop/phpqa-drupalcheck

Release historydanger

The package has had only three releases, all clustered on one day in March 2020, with no release in more than six years. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last release.

Licensecaution

No license is declared, and neither the package nor the linked repository contains a license file. That leaves the legal terms for using the dependency unclear.

Package scaffoldingcaution

The published artifact has no README, and the repository also has no README or tests; while tests are normally source-repository material, the missing consumer documentation is a real usability gap for this library-like package.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.