piwik/piwik-php-tracker

Registry deprecationdanger

Packagist marks the entire package as abandoned and names matomo/matomo-php-tracker as its replacement. This is a direct adoption risk despite the recent release and active repository.

Repo package mentioncaution

The repository name does not match piwik/piwik-php-tracker and its README does not mention that package. This creates uncertainty about whether the old registry package is the intended published project.

Security policycaution

The repository has no security policy file. This reduces vulnerability-reporting transparency, though the active organization backing and security scanning provide partial compensation.

Workflow auditcaution

Both workflows were analyzed with read-only permissions and no dangerous triggers or audit findings, but three of six action references are unpinned. This is a limited supply-chain hygiene concern.