peterujah/php-agora-tokens

Maintainerscaution

One individual has registry publish access. For this user-owned project that is plausible, but it provides limited redundancy if the maintainer becomes unavailable.

Release historycaution

The package is 494 days old with only three releases and one release in the last 12 months; the median interval is about 247 days, indicating a slow maintenance cadence despite the current release.

Repo commit activitycaution

There were zero commits and zero active maintainers during the past three months. This is partly offset by the release-date push, but it still leaves limited evidence of sustained ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.