oro/html5-purifier

Release historydanger

The package has had no release in about five years, with zero releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, confirming that the long release gap reflects absent recent development.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month. While a quiet issue tracker can be normal, here it reinforces the lack of recent maintenance evidence.

Repo toolingcaution

The repository uses Composer, but no security-scanning tooling was detected. This weakens evidence of ongoing dependency and vulnerability hygiene.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting and handling vulnerabilities. This is a transparency and maintenance gap, though it is less severe than the inactivity.