php-standard-library/tree

Name lookalikecaution

The artifact overlaps 97% with the similarly named php-standard-library/php-standard-library package, which has far more downloads and stable releases. The identity checks do not confirm it is a copy, so this is a meaningful caution rather than a definitive lookalike verdict.

Release historycaution

Ten releases in 191 days show active publishing, but the median interval is only a few hours, suggesting a very young and unusually bursty release history rather than established maturity.

Repo commit activitycaution

The repository has recorded zero commits and zero active maintainers in the last three months, despite a recent package release, leaving current maintenance capacity uncertain.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest repository hygiene gap, not evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities, although this alone does not make the package unfit.