plaisio/response-core

Dependency profilecaution

The package has 12 runtime dependencies, including several related Plaisio components, which increases the maintenance surface and transitive dependency exposure but is not inherently unsafe.

Release historycaution

The package has been released 15 times since November 2019, but there have been no releases in the last 12 months; this indicates a meaningful maintenance slowdown for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with no releases in the last year, this is the main abandonment concern.

Repo toolingcaution

The repository uses Composer and Phing for builds, but has no security scanning tools. The build tooling supports reproducibility, while the missing scanning is a modest transparency gap.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, not evidence that the package is unsafe.