ronappleton/php-key-changer

Project backingcaution

The package and repository are owned by the same individual, so the source identity is consistent. A single-person project still has limited demonstrated maintenance capacity.

Release historycaution

The package has had only three releases, all concentrated in August 2020, with no release in about six years. This is a meaningful maintenance and abandonment concern.

Repo commit activitycaution

There have been no commits and no active maintainers in the last three months, reinforcing that maintenance has stopped rather than merely slowed.

Repo popularitycaution

The repository has zero stars and forks and one watcher, indicating very limited visible adoption. Popularity is supporting evidence, but this adds some maturity uncertainty alongside the lack of recent activity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are reported. This is a modest repository-hygiene gap, not evidence that the release is unsafe.