riverside/php-express

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Although a release was published recently, the absence of ongoing source activity raises maintenance and abandonment concerns.

Release historycaution

The package is mature at over 7 years old, but it has only 6 releases and a median interval of about 12 months, with just 1 release in the last year. This indicates a slow maintenance cadence, partly offset by the release published recently.

Repo issue activitycaution

There are 4 open issues and 1 open pull request, but no issues or pull requests were opened or closed in the last month. This supports the broader picture of limited current activity.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. This is a transparency and hygiene gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no published security policy. For a web micro-framework, that leaves vulnerability reporting and response expectations unclear.