php-standard-library/message

Dependency profilecaution

Seven runtime dependencies, including several packages from the same standard-library project, create a meaningful dependency surface but are coherent with this library's functionality.

Release historycaution

The package is only 124 days old with three releases, arriving about every 62 days. That shows ongoing publishing but not enough history to establish mature maintenance.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. Although the repository was recently pushed and the package was released, the observed development activity is too thin to demonstrate sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no published security policy. That reduces clarity for reporting vulnerabilities, though it does not by itself indicate abandonment.