simonschaufi/surf-minimal-composer-app

Licensecaution

The package has no declared license, license file, or repository license file. That creates a real adoption and redistribution concern for a dependency.

Package file treecaution

The complete package and repository each contain only four files: README.md, composer.json, composer.lock, and .gitignore. This is consistent with a small test application, but offers little evidence of mature library development.

Release historycaution

This is the only release, published about four and a half years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, consistent with the absence of releases since March 2022. No provided signal compensates for this inactivity.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. For this very small test repository, the missing scanner is a minor hygiene gap rather than a primary health risk.