phplist/base-distribution

Release historycaution

The package has only 6 releases since 2018 and none in the last 12 months, which raises maintenance and release-confidence concerns. The linked repository was pushed recently, providing some compensating evidence.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months, despite the repository not being archived. That weakens evidence of sustained maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no pull requests were merged, indicating limited recent project throughput. Ten open pull requests add some unresolved-work risk.

Repo toolingcaution

The repository uses Composer but reports no security-scanning tooling. For a package intended as a project foundation, that is a meaningful transparency and maintenance gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a moderate transparency gap rather than evidence that the package is unsafe.