mostka/defer

Registry deprecationdanger

Packagist marks the entire package as abandoned and names tito10047/php-defer as its replacement. This is a severe dependency risk despite the linked repository remaining available.

Licensecaution

The artifact contains an MIT license file, but the manifest declares Apache-2.0. This licensing mismatch should be resolved before adoption.

Release historycaution

The package has only five releases since 2017, with no release in over two years and none in the last 12 months. That indicates weak release maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A later repository push exists, but current activity remains absent in this measurement window.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings, but all three action references are unpinned. That is a supply-chain hygiene gap rather than a severe risk.