pkit/validator

Release historycaution

This is the only release, published about 2 years and 8 months ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, consistent with a project that has been inactive since February 2024.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That raises a concrete concern that the source repository may not belong to this release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. For a small package this is a transparency gap, though not decisive alone.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's small dependency surface partly limits the concern.