pluf/todo

Release historycaution

The latest release was about 6 years ago, with no releases in the last 12 months. This strongly raises abandonment risk despite a historically regular median release interval of about 14 days.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, and the repository was last pushed about 6 years ago. This is direct evidence of sharply reduced maintenance capacity.

Repo popularitycaution

The repository has no stars or forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad user or contributor base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That is a meaningful transparency and maintenance-hygiene gap for a package with no recent activity.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is not by itself evidence that the release is unsafe.