popojargo/php-on-couch

Registry deprecationdanger

The registry marks the entire package as abandoned, with no distinct replacement identified. This is a severe adoption risk for a dependency.

Release historydanger

The latest release was over 9 years ago, with no releases in the last 12 months. The package has a limited seven-release history, indicating prolonged stagnation.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the release stagnation and limited maintenance capacity.

Licensecaution

A license file is present, so licensing is not absent; however, the manifest declares GPLv3 while the artifact license file was detected as LGPL-3.0, creating a material mismatch.

Repo toolingcaution

Composer and Phing provide build tooling, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than a standalone severe risk.