mrcrmn/laravel-http2-push

Release historydanger

The package has had no release in over five years, and its three releases were widely spaced. This indicates a substantial maintenance and compatibility risk despite the package not being deprecated.

Repo commit activitydanger

The repository recorded no commits and had no active maintainers in the last three months; combined with the old latest release, this supports an abandonment concern.

Maintainerscaution

A single registry maintainer creates a thin ownership base. The linked repository is owned by the same individual, so the identity is clear, but there is no contributor redundancy shown here.

Repo popularitycaution

The repository has only 3 stars, 2 forks, and no watchers. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of broad review or community support.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. The missing scanning is a modest transparency and hygiene gap, not evidence of an unsafe release by itself.