simonbackx/slack-php-webhook

Release historydanger

The package has had no release in more than 8 years: its latest release was June 2018, despite four releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, with its last push in June 2018. The long inactivity is not offset by the package's small scope.

Maintainerscaution

Only one registry maintainer is listed, leaving little visible publishing redundancy. The linked repository is also owned by an individual rather than an organization.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. For an old dependency with no recent maintenance, the missing security checks add a modest concern.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it does not by itself show an unsafe release.