sirian/open-exchange-rates-bundle

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a severe dependency risk, even though abandonment alone is not a malware finding.

Release historydanger

The package has only two releases, with none in the last 12 months; its latest release was over 10 years ago. This provides no evidence of current maintenance.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the archived project and reinforcing the lack of maintenance capacity.

Repository archiveddanger

The linked repository is archived and was last pushed in July 2016, so it is no longer maintained. This strongly increases abandonment and compatibility risk.

Licensecaution

Neither the package nor the linked repository declares or contains a recognized license file. That leaves the legal terms for reuse unclear.