mparaiso/aclserviceprovider

Release historydanger

The latest release was published in March 2013, with no releases in the last 12 months. That long period without updates is strong evidence of abandonment risk.

Package scaffoldingcaution

The package includes a short README that explicitly says the project is work in progress, while no tests or changelog are present. Missing tests and changelog are normal for published artifacts, but the stated unfinished status remains a transparency concern.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present. Given the package's age and lack of recent maintenance, this provides little assurance against dependency or release issues.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a meaningful gap for a security-related access-control package, though it is not evidence of malicious behavior.