roelmagdaleno/php-heroicons

Maintainerscaution

Only one account has registry publishing access. That is not itself a problem for a user-owned project, but it leaves little visible publishing redundancy alongside the inactive recent repository activity.

Release historycaution

The package has only three releases over roughly five years and none in the last 12 months, with a median gap of about 617 days. This indicates slow maintenance for a dependency, although the package appears narrowly scoped.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push in December 2024. This is the clearest maintenance concern, though the package may be feature-complete.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. For a small icon-rendering library this is a transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. This reduces clarity about vulnerability reporting and response expectations, even though the package has a relatively small functional scope.