qingbing/php-yar-doc

Project backingcaution

The registry namespace and repository owner match, so the source ownership is consistent. The owner is an individual rather than an organization, leaving less visible backing capacity.

Release historycaution

This is a mature package by age but has only one release, published about 6 years and 6 months ago, with no releases in the last 12 months. That sharply limits evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. Combined with the old release history, this is meaningful evidence of stalled maintenance.

Repo toolingcaution

Composer is used as the build tool, which fits the package, but no security scanning tools are present. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Repository archivedcaution

The linked repository is not archived, so it remains available for maintenance or review. Its last push was about 6 years and 6 months ago, limiting the practical benefit of that status.