revenuewire/lychee-php-sdk

Release historydanger

The latest release was published in November 2017, and there have been no releases in the last eight years. This is strong evidence of abandonment for a dependency that may need compatibility or security fixes.

Licensecaution

The package declares a proprietary license and has no detected license file in the artifact or repository. That creates a material legal barrier for an open-source dependency.

Repository archivedcaution

The linked repository is not archived, and its last push aligns with the final release. This avoids an explicit archive status but does not offset the lack of subsequent activity.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap.