sergaxil/composer-example-package

Release historydanger

The latest release was over six years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment for a package intended as a dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, consistent with its last push in November 2019. There is no observed recent maintenance to offset the age of the release.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, while the repository also has no tests or changelog. Missing tests and changelogs are normal packaging practice, but the absent README reduces consumer documentation for this library.

Repo package mentioncaution

The repository name does not match the package name, and no README package reference was found. A name mismatch can be normal for a subpackage, but here the available evidence does not establish that relationship.

Repo toolingcaution

Composer is used as the build tool, which is appropriate for a Packagist package, but no security scanning tooling is present. This is a modest hygiene gap rather than evidence that the release is unsafe.