php-standard-library/graph

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance despite the recent registry release.

Name lookalikecaution

The artifact overlaps 95.2% with php-standard-library/php-standard-library, a much more downloaded package, but it neither claims that identity nor presents itself as a copy. The matching organization-backed repository reduces the concern, so this is not evidence of a malicious lookalike.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community adoption or external review signal. The organization backing and repository tests partly offset the limited popularity evidence.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.