rosio/php-to-javascript-variables

Release historydanger

The package has had only four releases, with the latest in June 2014 and none in the last 12 months. This long lack of releases is strong evidence of abandonment risk, despite the repository not being archived.

Licensecaution

Neither the registry metadata, package artifact, nor repository reports a license. That creates a real adoption and redistribution concern with no provided evidence covering it.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. While this may reflect a small package, it provides no evidence of current maintenance.

Repo toolingcaution

The project uses Composer, providing ordinary build and dependency tooling. No security scanning tools are present, which is a minor transparency gap but not a severe standalone risk.

Repository archivedcaution

The linked repository is not archived, which is a modest positive. However, its last push was in July 2015, consistent with the release history's abandonment concern.