rector/rector-php-parser

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. Package-level abandonment is a severe dependency risk.

Release historydanger

This package has only one release, published nearly four years ago, with no releases in the last 12 months. That strongly indicates the published dependency is not maintained.

Project backingcaution

The repository is owned by an organization, but its owner is named deprecated-packages. This provides organizational context without compensating for the package's explicit abandoned status.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. This supports the package-level abandonment concern, although the repository was pushed more recently than the release.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. The missing scanning is a modest transparency and maintenance-hygiene concern.