package-url/packageurl-php

Release historycaution

The latest registry release was over two years ago, with no releases in the last 12 months; this raises maintenance and delivery concerns despite the package's established history of 10 releases.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization backing provides some ability to hand off maintenance but does not demonstrate a second active contributor.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer, showing current activity but a very low maintenance cadence.