octopyid/gphoto

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency, although the repository is not archived and this release has documentation.

Release historycaution

The package has 9 releases since February 2023, but none in the last 12 months; its latest release was in July 2025. The earlier median interval of about 27 days shows prior activity but does not offset the current pause.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. That supports the abandonment concern rather than showing active maintenance capacity.

Security policycaution

The repository has no security policy. For a small CLI this is a transparency gap, though the package still has a visible repository, tests, and release notes.

Workflow auditcaution

Both workflows were analyzed successfully with no trigger, injection, or high-severity findings, but all 6 action references are unpinned. That leaves avoidable build-reproducibility risk.