mobly/aerospike-psr7

Release historydanger

The latest release was published in March 2016, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment risk for a dependency released nearly 11 years ago.

Package scaffoldingcaution

The package has no README, which makes a library harder for consumers to integrate; the absence of tests and a changelog in the published artifact is normal packaging practice and is not penalized.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling is present. This is a modest supply-chain hygiene gap rather than evidence of active risk.

Repository archivedcaution

The repository is not marked archived, but it was last pushed in March 2016, providing little evidence of ongoing maintenance. The non-archived status is a limited compensating signal.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though it is secondary to the long maintenance gap.