net_bazzline/php_component_process_pipe

Licensecaution

The artifact includes a license file and the repository also has one, so licensing is present. However, the manifest declares LGPLv3 while the detected license is GPL-3.0, creating a material clarification concern.

Release historycaution

The latest release was published about 10 years ago, with no releases in the last 12 months. This substantially lowers confidence in package-level maintenance, although the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. The more recent repository push helps, but does not demonstrate ongoing development activity.

Repo popularitycaution

The repository has only 3 stars and no forks, providing little evidence of broad community review or shared maintenance capacity. Popularity is supporting evidence, so this is a modest concern rather than a verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a hygiene gap that matters somewhat for a package with no recent release activity.