puli/composer-plugin

Release historydanger

The latest release was published in March 2016, with no releases in the last 12 months. This long release gap is strong evidence of abandonment risk, despite the earlier history of 12 releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly ten-year release gap. This substantially weakens confidence in maintenance capacity.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe on its own.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern compared with the much stronger maintenance warning.

Version stabilitycaution

The assessed version is still a beta, and all recent releases are prereleases. That leaves more compatibility uncertainty than a stable release would, especially alongside the lack of newer releases.