mgriego/flysystem-clamav

Release historydanger

This package has only one release, published over nine years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the stable v1.0 version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push in 2018, this materially increases abandonment risk.

Dependency profilecaution

The package has three runtime dependencies, including PHP, Flysystem, and Quahog. This is a modest dependency surface, though each dependency adds maintenance exposure to an otherwise inactive package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a minor transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. For a package that scans files, the missing reporting guidance is a modest transparency gap, though it is less important than the demonstrated inactivity.