openwebx/opencache

Dependency profilecaution

The package declares four runtime dependencies, including phpfastcache, predis, and ext-igbinary. This is a manageable but nontrivial dependency surface for a small wrapper.

Project backingcaution

The repository owner is an individual user rather than an organization, so the single registry maintainer provides limited visible backing for continued maintenance.

Release historycaution

The latest release was published over five years ago, with no releases in the last 12 months; only two releases exist overall. This is a substantial maintenance concern, though the linked repository was pushed more recently.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months measured. Combined with the old registry release, this indicates weak recent maintenance activity.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. That is a maintenance and transparency gap, although it is not evidence of malicious behavior by itself.