pathologic/doctrine-cache-bridge

Release historycaution

Only two releases were published, with the latest on July 20, 2021 and none in the following five years. This is strong evidence of abandonment risk for a package still being considered as a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates for over five years. The repository is not archived, but that does not compensate for the prolonged inactivity.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention this package. Although this can occur with subpackages, the collected evidence does not establish that this repository is the package's intended source.

Repo toolingcaution

Composer is used for the build, which fits the package, but no security-scanning tools are present. That leaves limited evidence of automated security maintenance.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities are reported and handled. This is a hygiene gap rather than evidence that the package is unsafe.