phased/phase

Release historydanger

The package has had no release in more than six years, despite six releases in its first few months; this is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and reducing confidence in ongoing maintenance.

Maintainerscaution

One individual has registry publish access. That is not inherently unsafe, but without recent activity or organization backing it leaves the project with a thin apparent maintainer base.

Package file treecaution

The artifact and repository each contain only README.md and composer.json. The README identifies this as a subtree split, so the small tree may be intentional, but it provides little transparency into implementation or testing.

Repo toolingcaution

Composer is used for build and dependency management, which is appropriate, but no security scanning tooling was detected. This is a hygiene gap rather than evidence of an unsafe release.