nerd4ever/php-id3

Release historydanger

This is the package's only release, published about two years and seven months ago, with no releases in the last 12 months. The README confirms that the fork is intentionally frozen, which explains the inactivity but leaves no evidence of ongoing maintenance.

Licensecaution

The manifest declares the package proprietary, with no detected license text and no license file in the package or repository. That is a meaningful transparency and reuse concern for an open-source dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stated decision not to update the fork. The repository is not archived, but there is no recent maintenance capacity shown.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. The small, frozen project provides no other supplied evidence that compensates for this gap.