sergeil/expander-bundle

Release historycaution

The package has six releases since June 2014, but none in the last four years and the latest release was in January 2022. This indicates materially reduced maintenance confidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a meaningful abandonment concern, though the repository is not marked archived.

Repo popularitycaution

The repository has only 2 stars, 2 forks, and 1 watcher, so there is little community evidence to compensate for the limited recent activity. Popularity is supporting evidence rather than a verdict by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest hygiene gap in an otherwise inspectable PHP package.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.