sigjlr/phpconfig

Release historydanger

The package has only one release, 0 releases in the last 12 months, and its latest release was about 13 years ago. This is strong evidence of abandonment for a dependency that may need compatibility or security updates.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but there is no observed recent maintenance.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher, indicating little visible adoption or community support. Popularity is supporting evidence rather than decisive on its own, but it provides no compensating maintenance signal here.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package handling, but no security scanning tools are present. This is a secondary hygiene concern alongside the much stronger evidence of inactivity.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. For a configuration-reading library, this is a genuine transparency and maintenance gap.