pcov/clobber

Release historydanger

The latest release was nearly seven years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a package intended to track PHPUnit and PHP tooling.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no active maintenance.

Repo issue activitycaution

There was no issue or pull-request activity in the last month, while one issue and one pull request remain open. This adds to the evidence of inactivity, though the small project scope limits its weight.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a maintenance and transparency gap, though it is secondary to the inactivity evidence.

Security policycaution

The repository has no security policy. For a small package this is not severe on its own, but it reduces transparency about how vulnerabilities would be handled.