philetaylor/php-gpglib

Release historydanger

The latest release was on January 10, 2018, with no releases in the last 12 months. That long release gap materially raises abandonment and compatibility concerns.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the very old release and indicating currently inactive maintenance.

Project backingcaution

The package and repository are backed by the same individual user account, which is consistent ownership but provides a limited apparent organizational support base.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured; this is a meaningful hygiene gap for a library that wraps GPG operations.

Security policycaution

The repository has no security policy. For a GPG-related library, the lack of a documented vulnerability-reporting path weakens transparency and maintenance readiness.