prolix/di-extra-bundle

Release historydanger

The package has had no releases in the last 12 months, and its latest release was over seven years ago. This is strong evidence of abandonment risk despite 21 historical releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. No provided activity signal compensates for this inactivity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source-to-artifact relationship is unclear. This creates a meaningful transparency concern even though the repository owner is an organization.

Repo toolingcaution

The project uses Composer, but no security-scanning tooling was detected. That is a modest hygiene gap and adds concern alongside the absence of recent maintenance.

Security policycaution

The linked repository has no security policy. For a dependency-injection library, this weakens the project's published process for handling security reports, though it does not by itself show unsafe code.