mnapoli/invoker

Registry deprecationdanger

Packagist marks the entire package as abandoned and names php-di/invoker as its replacement. This directly raises adoption risk even though the linked source repository remains available.

Release historycaution

The package has existed since 2015 with 23 releases, but recorded zero releases in the last 12 months. That suggests maintenance has slowed substantially, despite the recent 2.3.7 release shown elsewhere.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. This is a meaningful maintenance warning, although the project did publish the assessed release recently.

Workflow auditcaution

All six analyzed action references are unpinned, which weakens build reproducibility. The workflow was fully analyzed, uses read-only permissions, and has no detected untrusted checkout or script-injection findings.