samaym/php-cmis

Release historydanger

The package is about 7 years old but has had no releases in the last 12 months; all 6 releases were published around October 2019. This is strong evidence of abandonment for a library dependency.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and leaving current maintenance capacity unproven.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tooling was detected. The missing scanning is a modest transparency and maintenance gap, not evidence of malicious behavior.

Repository archivedcaution

The linked repository is not archived, which is a compensating positive, but its last push was in October 2019 and does not offset the observed inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; the lack of recent activity makes this gap more material.