mobishift/libcashive

Release historydanger

This package has only one release, published in June 2014, with no releases in the last 12 months. That strongly suggests abandonment for a dependency intended to remain maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long-standing lack of releases and indicating no observed maintenance capacity.

Package file treecaution

The complete package contains only four files: LICENSE, README.md, cashive.php, and composer.json. This may be sufficient for a small SDK, but it leaves little visible project structure to support maintenance or integration.

Package scaffoldingcaution

The artifact includes a README, but it is only 42 characters long and the package has no tests or changelog. Missing tests and changelog are normal in published artifacts, while the extremely limited consumer documentation is a minor concern for an SDK.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. This is not evidence of a vulnerability, though it weakens the project's maintenance and dependency-hygiene posture.